Jul 10 01:04:52.658696 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Wed Jul 9 23:09:45 -00 2025 Jul 10 01:04:52.658711 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 01:04:52.658718 kernel: Disabled fast string operations Jul 10 01:04:52.658722 kernel: BIOS-provided physical RAM map: Jul 10 01:04:52.658725 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ebff] usable Jul 10 01:04:52.658729 kernel: BIOS-e820: [mem 0x000000000009ec00-0x000000000009ffff] reserved Jul 10 01:04:52.658735 kernel: BIOS-e820: [mem 0x00000000000dc000-0x00000000000fffff] reserved Jul 10 01:04:52.658739 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007fedffff] usable Jul 10 01:04:52.658743 kernel: BIOS-e820: [mem 0x000000007fee0000-0x000000007fefefff] ACPI data Jul 10 01:04:52.658747 kernel: BIOS-e820: [mem 0x000000007feff000-0x000000007fefffff] ACPI NVS Jul 10 01:04:52.658751 kernel: BIOS-e820: [mem 0x000000007ff00000-0x000000007fffffff] usable Jul 10 01:04:52.658755 kernel: BIOS-e820: [mem 0x00000000f0000000-0x00000000f7ffffff] reserved Jul 10 01:04:52.658759 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec0ffff] reserved Jul 10 01:04:52.658763 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Jul 10 01:04:52.658770 kernel: BIOS-e820: [mem 0x00000000fffe0000-0x00000000ffffffff] reserved Jul 10 01:04:52.658774 kernel: NX (Execute Disable) protection: active Jul 10 01:04:52.658778 kernel: SMBIOS 2.7 present. Jul 10 01:04:52.658783 kernel: DMI: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020 Jul 10 01:04:52.658787 kernel: vmware: hypercall mode: 0x00 Jul 10 01:04:52.658792 kernel: Hypervisor detected: VMware Jul 10 01:04:52.658797 kernel: vmware: TSC freq read from hypervisor : 3408.000 MHz Jul 10 01:04:52.658801 kernel: vmware: Host bus clock speed read from hypervisor : 66000000 Hz Jul 10 01:04:52.658806 kernel: vmware: using clock offset of 4261400424 ns Jul 10 01:04:52.658810 kernel: tsc: Detected 3408.000 MHz processor Jul 10 01:04:52.658815 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 10 01:04:52.658820 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 10 01:04:52.658824 kernel: last_pfn = 0x80000 max_arch_pfn = 0x400000000 Jul 10 01:04:52.658829 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 10 01:04:52.658833 kernel: total RAM covered: 3072M Jul 10 01:04:52.658839 kernel: Found optimal setting for mtrr clean up Jul 10 01:04:52.658844 kernel: gran_size: 64K chunk_size: 64K num_reg: 2 lose cover RAM: 0G Jul 10 01:04:52.658849 kernel: Using GB pages for direct mapping Jul 10 01:04:52.658853 kernel: ACPI: Early table checksum verification disabled Jul 10 01:04:52.658858 kernel: ACPI: RSDP 0x00000000000F6A00 000024 (v02 PTLTD ) Jul 10 01:04:52.659615 kernel: ACPI: XSDT 0x000000007FEE965B 00005C (v01 INTEL 440BX 06040000 VMW 01324272) Jul 10 01:04:52.659623 kernel: ACPI: FACP 0x000000007FEFEE73 0000F4 (v04 INTEL 440BX 06040000 PTL 000F4240) Jul 10 01:04:52.659628 kernel: ACPI: DSDT 0x000000007FEEAD55 01411E (v01 PTLTD Custom 06040000 MSFT 03000001) Jul 10 01:04:52.659633 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 10 01:04:52.659637 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 10 01:04:52.659644 kernel: ACPI: BOOT 0x000000007FEEAD2D 000028 (v01 PTLTD $SBFTBL$ 06040000 LTP 00000001) Jul 10 01:04:52.659651 kernel: ACPI: APIC 0x000000007FEEA5EB 000742 (v01 PTLTD ? APIC 06040000 LTP 00000000) Jul 10 01:04:52.659656 kernel: ACPI: MCFG 0x000000007FEEA5AF 00003C (v01 PTLTD $PCITBL$ 06040000 LTP 00000001) Jul 10 01:04:52.659661 kernel: ACPI: SRAT 0x000000007FEE9757 0008A8 (v02 VMWARE MEMPLUG 06040000 VMW 00000001) Jul 10 01:04:52.659666 kernel: ACPI: HPET 0x000000007FEE971F 000038 (v01 VMWARE VMW HPET 06040000 VMW 00000001) Jul 10 01:04:52.659672 kernel: ACPI: WAET 0x000000007FEE96F7 000028 (v01 VMWARE VMW WAET 06040000 VMW 00000001) Jul 10 01:04:52.659677 kernel: ACPI: Reserving FACP table memory at [mem 0x7fefee73-0x7fefef66] Jul 10 01:04:52.659682 kernel: ACPI: Reserving DSDT table memory at [mem 0x7feead55-0x7fefee72] Jul 10 01:04:52.659687 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 10 01:04:52.659692 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 10 01:04:52.659696 kernel: ACPI: Reserving BOOT table memory at [mem 0x7feead2d-0x7feead54] Jul 10 01:04:52.659701 kernel: ACPI: Reserving APIC table memory at [mem 0x7feea5eb-0x7feead2c] Jul 10 01:04:52.659706 kernel: ACPI: Reserving MCFG table memory at [mem 0x7feea5af-0x7feea5ea] Jul 10 01:04:52.659711 kernel: ACPI: Reserving SRAT table memory at [mem 0x7fee9757-0x7fee9ffe] Jul 10 01:04:52.662136 kernel: ACPI: Reserving HPET table memory at [mem 0x7fee971f-0x7fee9756] Jul 10 01:04:52.662142 kernel: ACPI: Reserving WAET table memory at [mem 0x7fee96f7-0x7fee971e] Jul 10 01:04:52.662147 kernel: system APIC only can use physical flat Jul 10 01:04:52.662152 kernel: Setting APIC routing to physical flat. Jul 10 01:04:52.662157 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 10 01:04:52.662162 kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Jul 10 01:04:52.662166 kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Jul 10 01:04:52.662171 kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Jul 10 01:04:52.662176 kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Jul 10 01:04:52.662182 kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Jul 10 01:04:52.662187 kernel: SRAT: PXM 0 -> APIC 0x0c -> Node 0 Jul 10 01:04:52.662192 kernel: SRAT: PXM 0 -> APIC 0x0e -> Node 0 Jul 10 01:04:52.662197 kernel: SRAT: PXM 0 -> APIC 0x10 -> Node 0 Jul 10 01:04:52.662202 kernel: SRAT: PXM 0 -> APIC 0x12 -> Node 0 Jul 10 01:04:52.662207 kernel: SRAT: PXM 0 -> APIC 0x14 -> Node 0 Jul 10 01:04:52.662211 kernel: SRAT: PXM 0 -> APIC 0x16 -> Node 0 Jul 10 01:04:52.662216 kernel: SRAT: PXM 0 -> APIC 0x18 -> Node 0 Jul 10 01:04:52.662227 kernel: SRAT: PXM 0 -> APIC 0x1a -> Node 0 Jul 10 01:04:52.662232 kernel: SRAT: PXM 0 -> APIC 0x1c -> Node 0 Jul 10 01:04:52.662238 kernel: SRAT: PXM 0 -> APIC 0x1e -> Node 0 Jul 10 01:04:52.662243 kernel: SRAT: PXM 0 -> APIC 0x20 -> Node 0 Jul 10 01:04:52.662248 kernel: SRAT: PXM 0 -> APIC 0x22 -> Node 0 Jul 10 01:04:52.662252 kernel: SRAT: PXM 0 -> APIC 0x24 -> Node 0 Jul 10 01:04:52.662257 kernel: SRAT: PXM 0 -> APIC 0x26 -> Node 0 Jul 10 01:04:52.662262 kernel: SRAT: PXM 0 -> APIC 0x28 -> Node 0 Jul 10 01:04:52.662267 kernel: SRAT: PXM 0 -> APIC 0x2a -> Node 0 Jul 10 01:04:52.662272 kernel: SRAT: PXM 0 -> APIC 0x2c -> Node 0 Jul 10 01:04:52.662276 kernel: SRAT: PXM 0 -> APIC 0x2e -> Node 0 Jul 10 01:04:52.662281 kernel: SRAT: PXM 0 -> APIC 0x30 -> Node 0 Jul 10 01:04:52.662287 kernel: SRAT: PXM 0 -> APIC 0x32 -> Node 0 Jul 10 01:04:52.662292 kernel: SRAT: PXM 0 -> APIC 0x34 -> Node 0 Jul 10 01:04:52.662297 kernel: SRAT: PXM 0 -> APIC 0x36 -> Node 0 Jul 10 01:04:52.662301 kernel: SRAT: PXM 0 -> APIC 0x38 -> Node 0 Jul 10 01:04:52.662306 kernel: SRAT: PXM 0 -> APIC 0x3a -> Node 0 Jul 10 01:04:52.662311 kernel: SRAT: PXM 0 -> APIC 0x3c -> Node 0 Jul 10 01:04:52.662316 kernel: SRAT: PXM 0 -> APIC 0x3e -> Node 0 Jul 10 01:04:52.662321 kernel: SRAT: PXM 0 -> APIC 0x40 -> Node 0 Jul 10 01:04:52.662326 kernel: SRAT: PXM 0 -> APIC 0x42 -> Node 0 Jul 10 01:04:52.662331 kernel: SRAT: PXM 0 -> APIC 0x44 -> Node 0 Jul 10 01:04:52.662337 kernel: SRAT: PXM 0 -> APIC 0x46 -> Node 0 Jul 10 01:04:52.662342 kernel: SRAT: PXM 0 -> APIC 0x48 -> Node 0 Jul 10 01:04:52.662346 kernel: SRAT: PXM 0 -> APIC 0x4a -> Node 0 Jul 10 01:04:52.662351 kernel: SRAT: PXM 0 -> APIC 0x4c -> Node 0 Jul 10 01:04:52.662356 kernel: SRAT: PXM 0 -> APIC 0x4e -> Node 0 Jul 10 01:04:52.662361 kernel: SRAT: PXM 0 -> APIC 0x50 -> Node 0 Jul 10 01:04:52.662366 kernel: SRAT: PXM 0 -> APIC 0x52 -> Node 0 Jul 10 01:04:52.662371 kernel: SRAT: PXM 0 -> APIC 0x54 -> Node 0 Jul 10 01:04:52.662376 kernel: SRAT: PXM 0 -> APIC 0x56 -> Node 0 Jul 10 01:04:52.662380 kernel: SRAT: PXM 0 -> APIC 0x58 -> Node 0 Jul 10 01:04:52.662386 kernel: SRAT: PXM 0 -> APIC 0x5a -> Node 0 Jul 10 01:04:52.662391 kernel: SRAT: PXM 0 -> APIC 0x5c -> Node 0 Jul 10 01:04:52.662396 kernel: SRAT: PXM 0 -> APIC 0x5e -> Node 0 Jul 10 01:04:52.662401 kernel: SRAT: PXM 0 -> APIC 0x60 -> Node 0 Jul 10 01:04:52.662406 kernel: SRAT: PXM 0 -> APIC 0x62 -> Node 0 Jul 10 01:04:52.662410 kernel: SRAT: PXM 0 -> APIC 0x64 -> Node 0 Jul 10 01:04:52.662415 kernel: SRAT: PXM 0 -> APIC 0x66 -> Node 0 Jul 10 01:04:52.662420 kernel: SRAT: PXM 0 -> APIC 0x68 -> Node 0 Jul 10 01:04:52.662424 kernel: SRAT: PXM 0 -> APIC 0x6a -> Node 0 Jul 10 01:04:52.662429 kernel: SRAT: PXM 0 -> APIC 0x6c -> Node 0 Jul 10 01:04:52.662435 kernel: SRAT: PXM 0 -> APIC 0x6e -> Node 0 Jul 10 01:04:52.662444 kernel: SRAT: PXM 0 -> APIC 0x70 -> Node 0 Jul 10 01:04:52.662449 kernel: SRAT: PXM 0 -> APIC 0x72 -> Node 0 Jul 10 01:04:52.662454 kernel: SRAT: PXM 0 -> APIC 0x74 -> Node 0 Jul 10 01:04:52.662459 kernel: SRAT: PXM 0 -> APIC 0x76 -> Node 0 Jul 10 01:04:52.662465 kernel: SRAT: PXM 0 -> APIC 0x78 -> Node 0 Jul 10 01:04:52.662473 kernel: SRAT: PXM 0 -> APIC 0x7a -> Node 0 Jul 10 01:04:52.662479 kernel: SRAT: PXM 0 -> APIC 0x7c -> Node 0 Jul 10 01:04:52.662484 kernel: SRAT: PXM 0 -> APIC 0x7e -> Node 0 Jul 10 01:04:52.662489 kernel: SRAT: PXM 0 -> APIC 0x80 -> Node 0 Jul 10 01:04:52.662495 kernel: SRAT: PXM 0 -> APIC 0x82 -> Node 0 Jul 10 01:04:52.662501 kernel: SRAT: PXM 0 -> APIC 0x84 -> Node 0 Jul 10 01:04:52.662506 kernel: SRAT: PXM 0 -> APIC 0x86 -> Node 0 Jul 10 01:04:52.662511 kernel: SRAT: PXM 0 -> APIC 0x88 -> Node 0 Jul 10 01:04:52.662516 kernel: SRAT: PXM 0 -> APIC 0x8a -> Node 0 Jul 10 01:04:52.662521 kernel: SRAT: PXM 0 -> APIC 0x8c -> Node 0 Jul 10 01:04:52.662527 kernel: SRAT: PXM 0 -> APIC 0x8e -> Node 0 Jul 10 01:04:52.662532 kernel: SRAT: PXM 0 -> APIC 0x90 -> Node 0 Jul 10 01:04:52.662538 kernel: SRAT: PXM 0 -> APIC 0x92 -> Node 0 Jul 10 01:04:52.662543 kernel: SRAT: PXM 0 -> APIC 0x94 -> Node 0 Jul 10 01:04:52.662548 kernel: SRAT: PXM 0 -> APIC 0x96 -> Node 0 Jul 10 01:04:52.662553 kernel: SRAT: PXM 0 -> APIC 0x98 -> Node 0 Jul 10 01:04:52.662558 kernel: SRAT: PXM 0 -> APIC 0x9a -> Node 0 Jul 10 01:04:52.662564 kernel: SRAT: PXM 0 -> APIC 0x9c -> Node 0 Jul 10 01:04:52.662569 kernel: SRAT: PXM 0 -> APIC 0x9e -> Node 0 Jul 10 01:04:52.662574 kernel: SRAT: PXM 0 -> APIC 0xa0 -> Node 0 Jul 10 01:04:52.662579 kernel: SRAT: PXM 0 -> APIC 0xa2 -> Node 0 Jul 10 01:04:52.662584 kernel: SRAT: PXM 0 -> APIC 0xa4 -> Node 0 Jul 10 01:04:52.662591 kernel: SRAT: PXM 0 -> APIC 0xa6 -> Node 0 Jul 10 01:04:52.662596 kernel: SRAT: PXM 0 -> APIC 0xa8 -> Node 0 Jul 10 01:04:52.662601 kernel: SRAT: PXM 0 -> APIC 0xaa -> Node 0 Jul 10 01:04:52.662606 kernel: SRAT: PXM 0 -> APIC 0xac -> Node 0 Jul 10 01:04:52.662611 kernel: SRAT: PXM 0 -> APIC 0xae -> Node 0 Jul 10 01:04:52.662616 kernel: SRAT: PXM 0 -> APIC 0xb0 -> Node 0 Jul 10 01:04:52.662622 kernel: SRAT: PXM 0 -> APIC 0xb2 -> Node 0 Jul 10 01:04:52.662627 kernel: SRAT: PXM 0 -> APIC 0xb4 -> Node 0 Jul 10 01:04:52.662632 kernel: SRAT: PXM 0 -> APIC 0xb6 -> Node 0 Jul 10 01:04:52.662638 kernel: SRAT: PXM 0 -> APIC 0xb8 -> Node 0 Jul 10 01:04:52.662643 kernel: SRAT: PXM 0 -> APIC 0xba -> Node 0 Jul 10 01:04:52.662648 kernel: SRAT: PXM 0 -> APIC 0xbc -> Node 0 Jul 10 01:04:52.662654 kernel: SRAT: PXM 0 -> APIC 0xbe -> Node 0 Jul 10 01:04:52.662659 kernel: SRAT: PXM 0 -> APIC 0xc0 -> Node 0 Jul 10 01:04:52.662664 kernel: SRAT: PXM 0 -> APIC 0xc2 -> Node 0 Jul 10 01:04:52.662669 kernel: SRAT: PXM 0 -> APIC 0xc4 -> Node 0 Jul 10 01:04:52.662674 kernel: SRAT: PXM 0 -> APIC 0xc6 -> Node 0 Jul 10 01:04:52.662680 kernel: SRAT: PXM 0 -> APIC 0xc8 -> Node 0 Jul 10 01:04:52.662685 kernel: SRAT: PXM 0 -> APIC 0xca -> Node 0 Jul 10 01:04:52.662691 kernel: SRAT: PXM 0 -> APIC 0xcc -> Node 0 Jul 10 01:04:52.662696 kernel: SRAT: PXM 0 -> APIC 0xce -> Node 0 Jul 10 01:04:52.662701 kernel: SRAT: PXM 0 -> APIC 0xd0 -> Node 0 Jul 10 01:04:52.662706 kernel: SRAT: PXM 0 -> APIC 0xd2 -> Node 0 Jul 10 01:04:52.662712 kernel: SRAT: PXM 0 -> APIC 0xd4 -> Node 0 Jul 10 01:04:52.662717 kernel: SRAT: PXM 0 -> APIC 0xd6 -> Node 0 Jul 10 01:04:52.662722 kernel: SRAT: PXM 0 -> APIC 0xd8 -> Node 0 Jul 10 01:04:52.662727 kernel: SRAT: PXM 0 -> APIC 0xda -> Node 0 Jul 10 01:04:52.662732 kernel: SRAT: PXM 0 -> APIC 0xdc -> Node 0 Jul 10 01:04:52.662737 kernel: SRAT: PXM 0 -> APIC 0xde -> Node 0 Jul 10 01:04:52.662743 kernel: SRAT: PXM 0 -> APIC 0xe0 -> Node 0 Jul 10 01:04:52.662748 kernel: SRAT: PXM 0 -> APIC 0xe2 -> Node 0 Jul 10 01:04:52.662754 kernel: SRAT: PXM 0 -> APIC 0xe4 -> Node 0 Jul 10 01:04:52.662759 kernel: SRAT: PXM 0 -> APIC 0xe6 -> Node 0 Jul 10 01:04:52.662764 kernel: SRAT: PXM 0 -> APIC 0xe8 -> Node 0 Jul 10 01:04:52.662769 kernel: SRAT: PXM 0 -> APIC 0xea -> Node 0 Jul 10 01:04:52.662774 kernel: SRAT: PXM 0 -> APIC 0xec -> Node 0 Jul 10 01:04:52.662779 kernel: SRAT: PXM 0 -> APIC 0xee -> Node 0 Jul 10 01:04:52.662784 kernel: SRAT: PXM 0 -> APIC 0xf0 -> Node 0 Jul 10 01:04:52.662789 kernel: SRAT: PXM 0 -> APIC 0xf2 -> Node 0 Jul 10 01:04:52.662796 kernel: SRAT: PXM 0 -> APIC 0xf4 -> Node 0 Jul 10 01:04:52.662801 kernel: SRAT: PXM 0 -> APIC 0xf6 -> Node 0 Jul 10 01:04:52.662806 kernel: SRAT: PXM 0 -> APIC 0xf8 -> Node 0 Jul 10 01:04:52.662811 kernel: SRAT: PXM 0 -> APIC 0xfa -> Node 0 Jul 10 01:04:52.662817 kernel: SRAT: PXM 0 -> APIC 0xfc -> Node 0 Jul 10 01:04:52.662822 kernel: SRAT: PXM 0 -> APIC 0xfe -> Node 0 Jul 10 01:04:52.662827 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Jul 10 01:04:52.663518 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Jul 10 01:04:52.663527 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000-0xbfffffff] hotplug Jul 10 01:04:52.663535 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] Jul 10 01:04:52.663540 kernel: NODE_DATA(0) allocated [mem 0x7fffa000-0x7fffffff] Jul 10 01:04:52.663546 kernel: Zone ranges: Jul 10 01:04:52.663552 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 10 01:04:52.663557 kernel: DMA32 [mem 0x0000000001000000-0x000000007fffffff] Jul 10 01:04:52.663563 kernel: Normal empty Jul 10 01:04:52.663568 kernel: Movable zone start for each node Jul 10 01:04:52.663573 kernel: Early memory node ranges Jul 10 01:04:52.663578 kernel: node 0: [mem 0x0000000000001000-0x000000000009dfff] Jul 10 01:04:52.663584 kernel: node 0: [mem 0x0000000000100000-0x000000007fedffff] Jul 10 01:04:52.663590 kernel: node 0: [mem 0x000000007ff00000-0x000000007fffffff] Jul 10 01:04:52.663595 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007fffffff] Jul 10 01:04:52.663601 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 10 01:04:52.663606 kernel: On node 0, zone DMA: 98 pages in unavailable ranges Jul 10 01:04:52.663611 kernel: On node 0, zone DMA32: 32 pages in unavailable ranges Jul 10 01:04:52.663617 kernel: ACPI: PM-Timer IO Port: 0x1008 Jul 10 01:04:52.663622 kernel: system APIC only can use physical flat Jul 10 01:04:52.663627 kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) Jul 10 01:04:52.663632 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Jul 10 01:04:52.663638 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Jul 10 01:04:52.663644 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Jul 10 01:04:52.663649 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Jul 10 01:04:52.663654 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Jul 10 01:04:52.663660 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Jul 10 01:04:52.663665 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Jul 10 01:04:52.663670 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Jul 10 01:04:52.663675 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Jul 10 01:04:52.663680 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Jul 10 01:04:52.663685 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Jul 10 01:04:52.663692 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Jul 10 01:04:52.663697 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Jul 10 01:04:52.663702 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Jul 10 01:04:52.663707 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Jul 10 01:04:52.663712 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Jul 10 01:04:52.663717 kernel: ACPI: LAPIC_NMI (acpi_id[0x11] high edge lint[0x1]) Jul 10 01:04:52.663722 kernel: ACPI: LAPIC_NMI (acpi_id[0x12] high edge lint[0x1]) Jul 10 01:04:52.663728 kernel: ACPI: LAPIC_NMI (acpi_id[0x13] high edge lint[0x1]) Jul 10 01:04:52.663733 kernel: ACPI: LAPIC_NMI (acpi_id[0x14] high edge lint[0x1]) Jul 10 01:04:52.663739 kernel: ACPI: LAPIC_NMI (acpi_id[0x15] high edge lint[0x1]) Jul 10 01:04:52.663744 kernel: ACPI: LAPIC_NMI (acpi_id[0x16] high edge lint[0x1]) Jul 10 01:04:52.663749 kernel: ACPI: LAPIC_NMI (acpi_id[0x17] high edge lint[0x1]) Jul 10 01:04:52.663754 kernel: ACPI: LAPIC_NMI (acpi_id[0x18] high edge lint[0x1]) Jul 10 01:04:52.663760 kernel: ACPI: LAPIC_NMI (acpi_id[0x19] high edge lint[0x1]) Jul 10 01:04:52.663765 kernel: ACPI: LAPIC_NMI (acpi_id[0x1a] high edge lint[0x1]) Jul 10 01:04:52.663770 kernel: ACPI: LAPIC_NMI (acpi_id[0x1b] high edge lint[0x1]) Jul 10 01:04:52.663775 kernel: ACPI: LAPIC_NMI (acpi_id[0x1c] high edge lint[0x1]) Jul 10 01:04:52.663780 kernel: ACPI: LAPIC_NMI (acpi_id[0x1d] high edge lint[0x1]) Jul 10 01:04:52.663786 kernel: ACPI: LAPIC_NMI (acpi_id[0x1e] high edge lint[0x1]) Jul 10 01:04:52.663792 kernel: ACPI: LAPIC_NMI (acpi_id[0x1f] high edge lint[0x1]) Jul 10 01:04:52.663797 kernel: ACPI: LAPIC_NMI (acpi_id[0x20] high edge lint[0x1]) Jul 10 01:04:52.663802 kernel: ACPI: LAPIC_NMI (acpi_id[0x21] high edge lint[0x1]) Jul 10 01:04:52.663807 kernel: ACPI: LAPIC_NMI (acpi_id[0x22] high edge lint[0x1]) Jul 10 01:04:52.663812 kernel: ACPI: LAPIC_NMI (acpi_id[0x23] high edge lint[0x1]) Jul 10 01:04:52.663817 kernel: ACPI: LAPIC_NMI (acpi_id[0x24] high edge lint[0x1]) Jul 10 01:04:52.663823 kernel: ACPI: LAPIC_NMI (acpi_id[0x25] high edge lint[0x1]) Jul 10 01:04:52.663828 kernel: ACPI: LAPIC_NMI (acpi_id[0x26] high edge lint[0x1]) Jul 10 01:04:52.663833 kernel: ACPI: LAPIC_NMI (acpi_id[0x27] high edge lint[0x1]) Jul 10 01:04:52.663839 kernel: ACPI: LAPIC_NMI (acpi_id[0x28] high edge lint[0x1]) Jul 10 01:04:52.663844 kernel: ACPI: LAPIC_NMI (acpi_id[0x29] high edge lint[0x1]) Jul 10 01:04:52.663850 kernel: ACPI: LAPIC_NMI (acpi_id[0x2a] high edge lint[0x1]) Jul 10 01:04:52.663855 kernel: ACPI: LAPIC_NMI (acpi_id[0x2b] high edge lint[0x1]) Jul 10 01:04:52.663860 kernel: ACPI: LAPIC_NMI (acpi_id[0x2c] high edge lint[0x1]) Jul 10 01:04:52.663865 kernel: ACPI: LAPIC_NMI (acpi_id[0x2d] high edge lint[0x1]) Jul 10 01:04:52.663871 kernel: ACPI: LAPIC_NMI (acpi_id[0x2e] high edge lint[0x1]) Jul 10 01:04:52.663876 kernel: ACPI: LAPIC_NMI (acpi_id[0x2f] high edge lint[0x1]) Jul 10 01:04:52.663881 kernel: ACPI: LAPIC_NMI (acpi_id[0x30] high edge lint[0x1]) Jul 10 01:04:52.663886 kernel: ACPI: LAPIC_NMI (acpi_id[0x31] high edge lint[0x1]) Jul 10 01:04:52.663892 kernel: ACPI: LAPIC_NMI (acpi_id[0x32] high edge lint[0x1]) Jul 10 01:04:52.663897 kernel: ACPI: LAPIC_NMI (acpi_id[0x33] high edge lint[0x1]) Jul 10 01:04:52.663902 kernel: ACPI: LAPIC_NMI (acpi_id[0x34] high edge lint[0x1]) Jul 10 01:04:52.663908 kernel: ACPI: LAPIC_NMI (acpi_id[0x35] high edge lint[0x1]) Jul 10 01:04:52.663913 kernel: ACPI: LAPIC_NMI (acpi_id[0x36] high edge lint[0x1]) Jul 10 01:04:52.663918 kernel: ACPI: LAPIC_NMI (acpi_id[0x37] high edge lint[0x1]) Jul 10 01:04:52.663923 kernel: ACPI: LAPIC_NMI (acpi_id[0x38] high edge lint[0x1]) Jul 10 01:04:52.663928 kernel: ACPI: LAPIC_NMI (acpi_id[0x39] high edge lint[0x1]) Jul 10 01:04:52.663933 kernel: ACPI: LAPIC_NMI (acpi_id[0x3a] high edge lint[0x1]) Jul 10 01:04:52.663940 kernel: ACPI: LAPIC_NMI (acpi_id[0x3b] high edge lint[0x1]) Jul 10 01:04:52.663945 kernel: ACPI: LAPIC_NMI (acpi_id[0x3c] high edge lint[0x1]) Jul 10 01:04:52.663950 kernel: ACPI: LAPIC_NMI (acpi_id[0x3d] high edge lint[0x1]) Jul 10 01:04:52.663955 kernel: ACPI: LAPIC_NMI (acpi_id[0x3e] high edge lint[0x1]) Jul 10 01:04:52.663961 kernel: ACPI: LAPIC_NMI (acpi_id[0x3f] high edge lint[0x1]) Jul 10 01:04:52.663966 kernel: ACPI: LAPIC_NMI (acpi_id[0x40] high edge lint[0x1]) Jul 10 01:04:52.663971 kernel: ACPI: LAPIC_NMI (acpi_id[0x41] high edge lint[0x1]) Jul 10 01:04:52.663976 kernel: ACPI: LAPIC_NMI (acpi_id[0x42] high edge lint[0x1]) Jul 10 01:04:52.663981 kernel: ACPI: LAPIC_NMI (acpi_id[0x43] high edge lint[0x1]) Jul 10 01:04:52.663986 kernel: ACPI: LAPIC_NMI (acpi_id[0x44] high edge lint[0x1]) Jul 10 01:04:52.663993 kernel: ACPI: LAPIC_NMI (acpi_id[0x45] high edge lint[0x1]) Jul 10 01:04:52.663998 kernel: ACPI: LAPIC_NMI (acpi_id[0x46] high edge lint[0x1]) Jul 10 01:04:52.664003 kernel: ACPI: LAPIC_NMI (acpi_id[0x47] high edge lint[0x1]) Jul 10 01:04:52.664008 kernel: ACPI: LAPIC_NMI (acpi_id[0x48] high edge lint[0x1]) Jul 10 01:04:52.664013 kernel: ACPI: LAPIC_NMI (acpi_id[0x49] high edge lint[0x1]) Jul 10 01:04:52.664018 kernel: ACPI: LAPIC_NMI (acpi_id[0x4a] high edge lint[0x1]) Jul 10 01:04:52.664024 kernel: ACPI: LAPIC_NMI (acpi_id[0x4b] high edge lint[0x1]) Jul 10 01:04:52.664029 kernel: ACPI: LAPIC_NMI (acpi_id[0x4c] high edge lint[0x1]) Jul 10 01:04:52.664034 kernel: ACPI: LAPIC_NMI (acpi_id[0x4d] high edge lint[0x1]) Jul 10 01:04:52.664040 kernel: ACPI: LAPIC_NMI (acpi_id[0x4e] high edge lint[0x1]) Jul 10 01:04:52.664045 kernel: ACPI: LAPIC_NMI (acpi_id[0x4f] high edge lint[0x1]) Jul 10 01:04:52.664050 kernel: ACPI: LAPIC_NMI (acpi_id[0x50] high edge lint[0x1]) Jul 10 01:04:52.664055 kernel: ACPI: LAPIC_NMI (acpi_id[0x51] high edge lint[0x1]) Jul 10 01:04:52.664061 kernel: ACPI: LAPIC_NMI (acpi_id[0x52] high edge lint[0x1]) Jul 10 01:04:52.664066 kernel: ACPI: LAPIC_NMI (acpi_id[0x53] high edge lint[0x1]) Jul 10 01:04:52.664071 kernel: ACPI: LAPIC_NMI (acpi_id[0x54] high edge lint[0x1]) Jul 10 01:04:52.664076 kernel: ACPI: LAPIC_NMI (acpi_id[0x55] high edge lint[0x1]) Jul 10 01:04:52.664081 kernel: ACPI: LAPIC_NMI (acpi_id[0x56] high edge lint[0x1]) Jul 10 01:04:52.664086 kernel: ACPI: LAPIC_NMI (acpi_id[0x57] high edge lint[0x1]) Jul 10 01:04:52.664093 kernel: ACPI: LAPIC_NMI (acpi_id[0x58] high edge lint[0x1]) Jul 10 01:04:52.664098 kernel: ACPI: LAPIC_NMI (acpi_id[0x59] high edge lint[0x1]) Jul 10 01:04:52.664103 kernel: ACPI: LAPIC_NMI (acpi_id[0x5a] high edge lint[0x1]) Jul 10 01:04:52.664108 kernel: ACPI: LAPIC_NMI (acpi_id[0x5b] high edge lint[0x1]) Jul 10 01:04:52.664114 kernel: ACPI: LAPIC_NMI (acpi_id[0x5c] high edge lint[0x1]) Jul 10 01:04:52.664119 kernel: ACPI: LAPIC_NMI (acpi_id[0x5d] high edge lint[0x1]) Jul 10 01:04:52.664124 kernel: ACPI: LAPIC_NMI (acpi_id[0x5e] high edge lint[0x1]) Jul 10 01:04:52.664129 kernel: ACPI: LAPIC_NMI (acpi_id[0x5f] high edge lint[0x1]) Jul 10 01:04:52.664134 kernel: ACPI: LAPIC_NMI (acpi_id[0x60] high edge lint[0x1]) Jul 10 01:04:52.664141 kernel: ACPI: LAPIC_NMI (acpi_id[0x61] high edge lint[0x1]) Jul 10 01:04:52.664146 kernel: ACPI: LAPIC_NMI (acpi_id[0x62] high edge lint[0x1]) Jul 10 01:04:52.664151 kernel: ACPI: LAPIC_NMI (acpi_id[0x63] high edge lint[0x1]) Jul 10 01:04:52.664156 kernel: ACPI: LAPIC_NMI (acpi_id[0x64] high edge lint[0x1]) Jul 10 01:04:52.664161 kernel: ACPI: LAPIC_NMI (acpi_id[0x65] high edge lint[0x1]) Jul 10 01:04:52.664166 kernel: ACPI: LAPIC_NMI (acpi_id[0x66] high edge lint[0x1]) Jul 10 01:04:52.664172 kernel: ACPI: LAPIC_NMI (acpi_id[0x67] high edge lint[0x1]) Jul 10 01:04:52.664177 kernel: ACPI: LAPIC_NMI (acpi_id[0x68] high edge lint[0x1]) Jul 10 01:04:52.664182 kernel: ACPI: LAPIC_NMI (acpi_id[0x69] high edge lint[0x1]) Jul 10 01:04:52.664188 kernel: ACPI: LAPIC_NMI (acpi_id[0x6a] high edge lint[0x1]) Jul 10 01:04:52.664194 kernel: ACPI: LAPIC_NMI (acpi_id[0x6b] high edge lint[0x1]) Jul 10 01:04:52.664199 kernel: ACPI: LAPIC_NMI (acpi_id[0x6c] high edge lint[0x1]) Jul 10 01:04:52.664204 kernel: ACPI: LAPIC_NMI (acpi_id[0x6d] high edge lint[0x1]) Jul 10 01:04:52.664209 kernel: ACPI: LAPIC_NMI (acpi_id[0x6e] high edge lint[0x1]) Jul 10 01:04:52.664214 kernel: ACPI: LAPIC_NMI (acpi_id[0x6f] high edge lint[0x1]) Jul 10 01:04:52.664227 kernel: ACPI: LAPIC_NMI (acpi_id[0x70] high edge lint[0x1]) Jul 10 01:04:52.664233 kernel: ACPI: LAPIC_NMI (acpi_id[0x71] high edge lint[0x1]) Jul 10 01:04:52.664238 kernel: ACPI: LAPIC_NMI (acpi_id[0x72] high edge lint[0x1]) Jul 10 01:04:52.664243 kernel: ACPI: LAPIC_NMI (acpi_id[0x73] high edge lint[0x1]) Jul 10 01:04:52.664249 kernel: ACPI: LAPIC_NMI (acpi_id[0x74] high edge lint[0x1]) Jul 10 01:04:52.664254 kernel: ACPI: LAPIC_NMI (acpi_id[0x75] high edge lint[0x1]) Jul 10 01:04:52.664260 kernel: ACPI: LAPIC_NMI (acpi_id[0x76] high edge lint[0x1]) Jul 10 01:04:52.664265 kernel: ACPI: LAPIC_NMI (acpi_id[0x77] high edge lint[0x1]) Jul 10 01:04:52.664270 kernel: ACPI: LAPIC_NMI (acpi_id[0x78] high edge lint[0x1]) Jul 10 01:04:52.664275 kernel: ACPI: LAPIC_NMI (acpi_id[0x79] high edge lint[0x1]) Jul 10 01:04:52.664281 kernel: ACPI: LAPIC_NMI (acpi_id[0x7a] high edge lint[0x1]) Jul 10 01:04:52.664286 kernel: ACPI: LAPIC_NMI (acpi_id[0x7b] high edge lint[0x1]) Jul 10 01:04:52.664291 kernel: ACPI: LAPIC_NMI (acpi_id[0x7c] high edge lint[0x1]) Jul 10 01:04:52.664297 kernel: ACPI: LAPIC_NMI (acpi_id[0x7d] high edge lint[0x1]) Jul 10 01:04:52.664302 kernel: ACPI: LAPIC_NMI (acpi_id[0x7e] high edge lint[0x1]) Jul 10 01:04:52.664307 kernel: ACPI: LAPIC_NMI (acpi_id[0x7f] high edge lint[0x1]) Jul 10 01:04:52.664312 kernel: IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 Jul 10 01:04:52.664318 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge) Jul 10 01:04:52.664323 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 10 01:04:52.664328 kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000 Jul 10 01:04:52.664334 kernel: TSC deadline timer available Jul 10 01:04:52.664339 kernel: smpboot: Allowing 128 CPUs, 126 hotplug CPUs Jul 10 01:04:52.664344 kernel: [mem 0x80000000-0xefffffff] available for PCI devices Jul 10 01:04:52.664350 kernel: Booting paravirtualized kernel on VMware hypervisor Jul 10 01:04:52.664356 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 10 01:04:52.664361 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:128 nr_node_ids:1 Jul 10 01:04:52.664366 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Jul 10 01:04:52.664372 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Jul 10 01:04:52.664377 kernel: pcpu-alloc: [0] 000 001 002 003 004 005 006 007 Jul 10 01:04:52.664382 kernel: pcpu-alloc: [0] 008 009 010 011 012 013 014 015 Jul 10 01:04:52.664387 kernel: pcpu-alloc: [0] 016 017 018 019 020 021 022 023 Jul 10 01:04:52.664393 kernel: pcpu-alloc: [0] 024 025 026 027 028 029 030 031 Jul 10 01:04:52.664398 kernel: pcpu-alloc: [0] 032 033 034 035 036 037 038 039 Jul 10 01:04:52.664403 kernel: pcpu-alloc: [0] 040 041 042 043 044 045 046 047 Jul 10 01:04:52.664409 kernel: pcpu-alloc: [0] 048 049 050 051 052 053 054 055 Jul 10 01:04:52.664420 kernel: pcpu-alloc: [0] 056 057 058 059 060 061 062 063 Jul 10 01:04:52.664427 kernel: pcpu-alloc: [0] 064 065 066 067 068 069 070 071 Jul 10 01:04:52.664433 kernel: pcpu-alloc: [0] 072 073 074 075 076 077 078 079 Jul 10 01:04:52.664439 kernel: pcpu-alloc: [0] 080 081 082 083 084 085 086 087 Jul 10 01:04:52.664447 kernel: pcpu-alloc: [0] 088 089 090 091 092 093 094 095 Jul 10 01:04:52.664454 kernel: pcpu-alloc: [0] 096 097 098 099 100 101 102 103 Jul 10 01:04:52.664459 kernel: pcpu-alloc: [0] 104 105 106 107 108 109 110 111 Jul 10 01:04:52.664465 kernel: pcpu-alloc: [0] 112 113 114 115 116 117 118 119 Jul 10 01:04:52.664470 kernel: pcpu-alloc: [0] 120 121 122 123 124 125 126 127 Jul 10 01:04:52.664476 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515808 Jul 10 01:04:52.664482 kernel: Policy zone: DMA32 Jul 10 01:04:52.664488 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 01:04:52.664494 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 01:04:52.664500 kernel: printk: log_buf_len individual max cpu contribution: 4096 bytes Jul 10 01:04:52.664506 kernel: printk: log_buf_len total cpu_extra contributions: 520192 bytes Jul 10 01:04:52.664511 kernel: printk: log_buf_len min size: 262144 bytes Jul 10 01:04:52.664517 kernel: printk: log_buf_len: 1048576 bytes Jul 10 01:04:52.664522 kernel: printk: early log buf free: 239728(91%) Jul 10 01:04:52.664528 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 01:04:52.664533 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 10 01:04:52.664539 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 01:04:52.664545 kernel: Memory: 1940392K/2096628K available (12295K kernel code, 2275K rwdata, 13724K rodata, 47472K init, 4108K bss, 155976K reserved, 0K cma-reserved) Jul 10 01:04:52.664551 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=128, Nodes=1 Jul 10 01:04:52.664558 kernel: ftrace: allocating 34602 entries in 136 pages Jul 10 01:04:52.664564 kernel: ftrace: allocated 136 pages with 2 groups Jul 10 01:04:52.664571 kernel: rcu: Hierarchical RCU implementation. Jul 10 01:04:52.664577 kernel: rcu: RCU event tracing is enabled. Jul 10 01:04:52.664582 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=128. Jul 10 01:04:52.664589 kernel: Rude variant of Tasks RCU enabled. Jul 10 01:04:52.664595 kernel: Tracing variant of Tasks RCU enabled. Jul 10 01:04:52.664600 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 01:04:52.664606 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=128 Jul 10 01:04:52.664612 kernel: NR_IRQS: 33024, nr_irqs: 1448, preallocated irqs: 16 Jul 10 01:04:52.664618 kernel: random: crng init done Jul 10 01:04:52.664623 kernel: Console: colour VGA+ 80x25 Jul 10 01:04:52.664629 kernel: printk: console [tty0] enabled Jul 10 01:04:52.664634 kernel: printk: console [ttyS0] enabled Jul 10 01:04:52.664641 kernel: ACPI: Core revision 20210730 Jul 10 01:04:52.664647 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns Jul 10 01:04:52.664653 kernel: APIC: Switch to symmetric I/O mode setup Jul 10 01:04:52.664658 kernel: x2apic enabled Jul 10 01:04:52.664664 kernel: Switched APIC routing to physical x2apic. Jul 10 01:04:52.664669 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 10 01:04:52.664675 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 10 01:04:52.664681 kernel: Calibrating delay loop (skipped) preset value.. 6816.00 BogoMIPS (lpj=3408000) Jul 10 01:04:52.664686 kernel: Disabled fast string operations Jul 10 01:04:52.664693 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Jul 10 01:04:52.664698 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Jul 10 01:04:52.664704 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 10 01:04:52.664710 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Jul 10 01:04:52.664715 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Jul 10 01:04:52.664721 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Jul 10 01:04:52.664727 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Jul 10 01:04:52.664732 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Jul 10 01:04:52.664738 kernel: RETBleed: Mitigation: Enhanced IBRS Jul 10 01:04:52.664744 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 10 01:04:52.664750 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 10 01:04:52.664756 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 10 01:04:52.664761 kernel: SRBDS: Unknown: Dependent on hypervisor status Jul 10 01:04:52.664767 kernel: GDS: Unknown: Dependent on hypervisor status Jul 10 01:04:52.664773 kernel: ITS: Mitigation: Aligned branch/return thunks Jul 10 01:04:52.664778 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 10 01:04:52.664784 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 10 01:04:52.664790 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 10 01:04:52.664796 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 10 01:04:52.664802 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'compacted' format. Jul 10 01:04:52.664807 kernel: Freeing SMP alternatives memory: 32K Jul 10 01:04:52.664813 kernel: pid_max: default: 131072 minimum: 1024 Jul 10 01:04:52.664819 kernel: LSM: Security Framework initializing Jul 10 01:04:52.664824 kernel: SELinux: Initializing. Jul 10 01:04:52.664830 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 10 01:04:52.664835 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 10 01:04:52.664841 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Jul 10 01:04:52.664848 kernel: Performance Events: Skylake events, core PMU driver. Jul 10 01:04:52.664853 kernel: core: CPUID marked event: 'cpu cycles' unavailable Jul 10 01:04:52.664859 kernel: core: CPUID marked event: 'instructions' unavailable Jul 10 01:04:52.664865 kernel: core: CPUID marked event: 'bus cycles' unavailable Jul 10 01:04:52.664870 kernel: core: CPUID marked event: 'cache references' unavailable Jul 10 01:04:52.664875 kernel: core: CPUID marked event: 'cache misses' unavailable Jul 10 01:04:52.664881 kernel: core: CPUID marked event: 'branch instructions' unavailable Jul 10 01:04:52.664887 kernel: core: CPUID marked event: 'branch misses' unavailable Jul 10 01:04:52.664893 kernel: ... version: 1 Jul 10 01:04:52.664899 kernel: ... bit width: 48 Jul 10 01:04:52.664904 kernel: ... generic registers: 4 Jul 10 01:04:52.664910 kernel: ... value mask: 0000ffffffffffff Jul 10 01:04:52.664915 kernel: ... max period: 000000007fffffff Jul 10 01:04:52.664921 kernel: ... fixed-purpose events: 0 Jul 10 01:04:52.664926 kernel: ... event mask: 000000000000000f Jul 10 01:04:52.664932 kernel: signal: max sigframe size: 1776 Jul 10 01:04:52.664938 kernel: rcu: Hierarchical SRCU implementation. Jul 10 01:04:52.664945 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 10 01:04:52.664951 kernel: smp: Bringing up secondary CPUs ... Jul 10 01:04:52.664956 kernel: x86: Booting SMP configuration: Jul 10 01:04:52.664962 kernel: .... node #0, CPUs: #1 Jul 10 01:04:52.664967 kernel: Disabled fast string operations Jul 10 01:04:52.664973 kernel: smpboot: CPU 1 Converting physical 2 to logical package 1 Jul 10 01:04:52.664978 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Jul 10 01:04:52.664984 kernel: smp: Brought up 1 node, 2 CPUs Jul 10 01:04:52.664989 kernel: smpboot: Max logical packages: 128 Jul 10 01:04:52.664995 kernel: smpboot: Total of 2 processors activated (13632.00 BogoMIPS) Jul 10 01:04:52.665001 kernel: devtmpfs: initialized Jul 10 01:04:52.665007 kernel: x86/mm: Memory block size: 128MB Jul 10 01:04:52.665012 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7feff000-0x7fefffff] (4096 bytes) Jul 10 01:04:52.665018 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 01:04:52.665024 kernel: futex hash table entries: 32768 (order: 9, 2097152 bytes, linear) Jul 10 01:04:52.665029 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 01:04:52.665035 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 01:04:52.665040 kernel: audit: initializing netlink subsys (disabled) Jul 10 01:04:52.665046 kernel: audit: type=2000 audit(1752109491.086:1): state=initialized audit_enabled=0 res=1 Jul 10 01:04:52.665053 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 01:04:52.665058 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 10 01:04:52.665064 kernel: cpuidle: using governor menu Jul 10 01:04:52.665070 kernel: Simple Boot Flag at 0x36 set to 0x80 Jul 10 01:04:52.665075 kernel: ACPI: bus type PCI registered Jul 10 01:04:52.665081 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 01:04:52.665086 kernel: dca service started, version 1.12.1 Jul 10 01:04:52.665092 kernel: PCI: MMCONFIG for domain 0000 [bus 00-7f] at [mem 0xf0000000-0xf7ffffff] (base 0xf0000000) Jul 10 01:04:52.665097 kernel: PCI: MMCONFIG at [mem 0xf0000000-0xf7ffffff] reserved in E820 Jul 10 01:04:52.665104 kernel: PCI: Using configuration type 1 for base access Jul 10 01:04:52.665110 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 10 01:04:52.665115 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 01:04:52.665121 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 01:04:52.665127 kernel: ACPI: Added _OSI(Module Device) Jul 10 01:04:52.665132 kernel: ACPI: Added _OSI(Processor Device) Jul 10 01:04:52.665138 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 01:04:52.665143 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 01:04:52.665149 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 01:04:52.665156 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 01:04:52.665161 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 01:04:52.665167 kernel: ACPI: [Firmware Bug]: BIOS _OSI(Linux) query ignored Jul 10 01:04:52.665173 kernel: ACPI: Interpreter enabled Jul 10 01:04:52.665179 kernel: ACPI: PM: (supports S0 S1 S5) Jul 10 01:04:52.665184 kernel: ACPI: Using IOAPIC for interrupt routing Jul 10 01:04:52.665190 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 10 01:04:52.665195 kernel: ACPI: Enabled 4 GPEs in block 00 to 0F Jul 10 01:04:52.665201 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-7f]) Jul 10 01:04:52.665283 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 01:04:52.665335 kernel: acpi PNP0A03:00: _OSC: platform does not support [AER LTR] Jul 10 01:04:52.665382 kernel: acpi PNP0A03:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability] Jul 10 01:04:52.665390 kernel: PCI host bridge to bus 0000:00 Jul 10 01:04:52.665442 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 10 01:04:52.665486 kernel: pci_bus 0000:00: root bus resource [mem 0x000cc000-0x000dbfff window] Jul 10 01:04:52.665533 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 10 01:04:52.665575 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 10 01:04:52.665616 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xfeff window] Jul 10 01:04:52.665659 kernel: pci_bus 0000:00: root bus resource [bus 00-7f] Jul 10 01:04:52.665714 kernel: pci 0000:00:00.0: [8086:7190] type 00 class 0x060000 Jul 10 01:04:52.665767 kernel: pci 0000:00:01.0: [8086:7191] type 01 class 0x060400 Jul 10 01:04:52.665821 kernel: pci 0000:00:07.0: [8086:7110] type 00 class 0x060100 Jul 10 01:04:52.665879 kernel: pci 0000:00:07.1: [8086:7111] type 00 class 0x01018a Jul 10 01:04:52.665928 kernel: pci 0000:00:07.1: reg 0x20: [io 0x1060-0x106f] Jul 10 01:04:52.665976 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 10 01:04:52.666023 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 10 01:04:52.666071 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 10 01:04:52.666117 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 10 01:04:52.666171 kernel: pci 0000:00:07.3: [8086:7113] type 00 class 0x068000 Jul 10 01:04:52.666226 kernel: pci 0000:00:07.3: quirk: [io 0x1000-0x103f] claimed by PIIX4 ACPI Jul 10 01:04:52.666281 kernel: pci 0000:00:07.3: quirk: [io 0x1040-0x104f] claimed by PIIX4 SMB Jul 10 01:04:52.666334 kernel: pci 0000:00:07.7: [15ad:0740] type 00 class 0x088000 Jul 10 01:04:52.666383 kernel: pci 0000:00:07.7: reg 0x10: [io 0x1080-0x10bf] Jul 10 01:04:52.666430 kernel: pci 0000:00:07.7: reg 0x14: [mem 0xfebfe000-0xfebfffff 64bit] Jul 10 01:04:52.666482 kernel: pci 0000:00:0f.0: [15ad:0405] type 00 class 0x030000 Jul 10 01:04:52.666533 kernel: pci 0000:00:0f.0: reg 0x10: [io 0x1070-0x107f] Jul 10 01:04:52.666579 kernel: pci 0000:00:0f.0: reg 0x14: [mem 0xe8000000-0xefffffff pref] Jul 10 01:04:52.666626 kernel: pci 0000:00:0f.0: reg 0x18: [mem 0xfe000000-0xfe7fffff] Jul 10 01:04:52.666673 kernel: pci 0000:00:0f.0: reg 0x30: [mem 0x00000000-0x00007fff pref] Jul 10 01:04:52.666719 kernel: pci 0000:00:0f.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 10 01:04:52.666771 kernel: pci 0000:00:11.0: [15ad:0790] type 01 class 0x060401 Jul 10 01:04:52.666826 kernel: pci 0000:00:15.0: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.666874 kernel: pci 0000:00:15.0: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.666926 kernel: pci 0000:00:15.1: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.666976 kernel: pci 0000:00:15.1: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667028 kernel: pci 0000:00:15.2: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667075 kernel: pci 0000:00:15.2: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667127 kernel: pci 0000:00:15.3: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667178 kernel: pci 0000:00:15.3: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667241 kernel: pci 0000:00:15.4: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667289 kernel: pci 0000:00:15.4: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667341 kernel: pci 0000:00:15.5: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667388 kernel: pci 0000:00:15.5: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667440 kernel: pci 0000:00:15.6: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667491 kernel: pci 0000:00:15.6: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667543 kernel: pci 0000:00:15.7: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667591 kernel: pci 0000:00:15.7: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667642 kernel: pci 0000:00:16.0: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667689 kernel: pci 0000:00:16.0: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667743 kernel: pci 0000:00:16.1: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667790 kernel: pci 0000:00:16.1: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667840 kernel: pci 0000:00:16.2: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667888 kernel: pci 0000:00:16.2: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.667939 kernel: pci 0000:00:16.3: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.667987 kernel: pci 0000:00:16.3: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668042 kernel: pci 0000:00:16.4: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.668090 kernel: pci 0000:00:16.4: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668142 kernel: pci 0000:00:16.5: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.668190 kernel: pci 0000:00:16.5: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668247 kernel: pci 0000:00:16.6: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.668296 kernel: pci 0000:00:16.6: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668347 kernel: pci 0000:00:16.7: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.668397 kernel: pci 0000:00:16.7: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668456 kernel: pci 0000:00:17.0: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.668507 kernel: pci 0000:00:17.0: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668558 kernel: pci 0000:00:17.1: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.668606 kernel: pci 0000:00:17.1: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668656 kernel: pci 0000:00:17.2: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.668706 kernel: pci 0000:00:17.2: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668757 kernel: pci 0000:00:17.3: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.668805 kernel: pci 0000:00:17.3: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668857 kernel: pci 0000:00:17.4: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.668905 kernel: pci 0000:00:17.4: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.668955 kernel: pci 0000:00:17.5: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669005 kernel: pci 0000:00:17.5: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.669054 kernel: pci 0000:00:17.6: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669103 kernel: pci 0000:00:17.6: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.669154 kernel: pci 0000:00:17.7: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669202 kernel: pci 0000:00:17.7: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.669260 kernel: pci 0000:00:18.0: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669326 kernel: pci 0000:00:18.0: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.669407 kernel: pci 0000:00:18.1: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669458 kernel: pci 0000:00:18.1: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.669524 kernel: pci 0000:00:18.2: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669573 kernel: pci 0000:00:18.2: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.669624 kernel: pci 0000:00:18.3: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669673 kernel: pci 0000:00:18.3: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.669725 kernel: pci 0000:00:18.4: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669774 kernel: pci 0000:00:18.4: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.669827 kernel: pci 0000:00:18.5: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669875 kernel: pci 0000:00:18.5: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.669925 kernel: pci 0000:00:18.6: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.669974 kernel: pci 0000:00:18.6: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.670027 kernel: pci 0000:00:18.7: [15ad:07a0] type 01 class 0x060400 Jul 10 01:04:52.670076 kernel: pci 0000:00:18.7: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.670127 kernel: pci_bus 0000:01: extended config space not accessible Jul 10 01:04:52.670175 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 10 01:04:52.670234 kernel: pci_bus 0000:02: extended config space not accessible Jul 10 01:04:52.670243 kernel: acpiphp: Slot [32] registered Jul 10 01:04:52.670251 kernel: acpiphp: Slot [33] registered Jul 10 01:04:52.670256 kernel: acpiphp: Slot [34] registered Jul 10 01:04:52.670262 kernel: acpiphp: Slot [35] registered Jul 10 01:04:52.670268 kernel: acpiphp: Slot [36] registered Jul 10 01:04:52.670273 kernel: acpiphp: Slot [37] registered Jul 10 01:04:52.670279 kernel: acpiphp: Slot [38] registered Jul 10 01:04:52.670284 kernel: acpiphp: Slot [39] registered Jul 10 01:04:52.670290 kernel: acpiphp: Slot [40] registered Jul 10 01:04:52.670296 kernel: acpiphp: Slot [41] registered Jul 10 01:04:52.670301 kernel: acpiphp: Slot [42] registered Jul 10 01:04:52.670308 kernel: acpiphp: Slot [43] registered Jul 10 01:04:52.670313 kernel: acpiphp: Slot [44] registered Jul 10 01:04:52.670319 kernel: acpiphp: Slot [45] registered Jul 10 01:04:52.670325 kernel: acpiphp: Slot [46] registered Jul 10 01:04:52.670330 kernel: acpiphp: Slot [47] registered Jul 10 01:04:52.670336 kernel: acpiphp: Slot [48] registered Jul 10 01:04:52.670341 kernel: acpiphp: Slot [49] registered Jul 10 01:04:52.670347 kernel: acpiphp: Slot [50] registered Jul 10 01:04:52.670352 kernel: acpiphp: Slot [51] registered Jul 10 01:04:52.670359 kernel: acpiphp: Slot [52] registered Jul 10 01:04:52.670364 kernel: acpiphp: Slot [53] registered Jul 10 01:04:52.670370 kernel: acpiphp: Slot [54] registered Jul 10 01:04:52.670376 kernel: acpiphp: Slot [55] registered Jul 10 01:04:52.670381 kernel: acpiphp: Slot [56] registered Jul 10 01:04:52.670387 kernel: acpiphp: Slot [57] registered Jul 10 01:04:52.670393 kernel: acpiphp: Slot [58] registered Jul 10 01:04:52.670398 kernel: acpiphp: Slot [59] registered Jul 10 01:04:52.670404 kernel: acpiphp: Slot [60] registered Jul 10 01:04:52.670409 kernel: acpiphp: Slot [61] registered Jul 10 01:04:52.670416 kernel: acpiphp: Slot [62] registered Jul 10 01:04:52.670421 kernel: acpiphp: Slot [63] registered Jul 10 01:04:52.670469 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] (subtractive decode) Jul 10 01:04:52.670516 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 10 01:04:52.670563 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 10 01:04:52.670610 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 10 01:04:52.670657 kernel: pci 0000:00:11.0: bridge window [mem 0x000a0000-0x000bffff window] (subtractive decode) Jul 10 01:04:52.670705 kernel: pci 0000:00:11.0: bridge window [mem 0x000cc000-0x000dbfff window] (subtractive decode) Jul 10 01:04:52.670753 kernel: pci 0000:00:11.0: bridge window [mem 0xc0000000-0xfebfffff window] (subtractive decode) Jul 10 01:04:52.670801 kernel: pci 0000:00:11.0: bridge window [io 0x0000-0x0cf7 window] (subtractive decode) Jul 10 01:04:52.670847 kernel: pci 0000:00:11.0: bridge window [io 0x0d00-0xfeff window] (subtractive decode) Jul 10 01:04:52.670900 kernel: pci 0000:03:00.0: [15ad:07c0] type 00 class 0x010700 Jul 10 01:04:52.670975 kernel: pci 0000:03:00.0: reg 0x10: [io 0x4000-0x4007] Jul 10 01:04:52.671026 kernel: pci 0000:03:00.0: reg 0x14: [mem 0xfd5f8000-0xfd5fffff 64bit] Jul 10 01:04:52.680294 kernel: pci 0000:03:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 10 01:04:52.680362 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Jul 10 01:04:52.680414 kernel: pci 0000:03:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 10 01:04:52.680473 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 10 01:04:52.680522 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 10 01:04:52.680579 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 10 01:04:52.680643 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 10 01:04:52.680692 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 10 01:04:52.680747 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 10 01:04:52.680817 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 10 01:04:52.680869 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 10 01:04:52.680921 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 10 01:04:52.680975 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 10 01:04:52.681024 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 10 01:04:52.681077 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 10 01:04:52.681143 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 10 01:04:52.681202 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 10 01:04:52.681267 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 10 01:04:52.681325 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 10 01:04:52.681378 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 10 01:04:52.681436 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 10 01:04:52.681498 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 10 01:04:52.681552 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 10 01:04:52.681607 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 10 01:04:52.681657 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 10 01:04:52.681722 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 10 01:04:52.681779 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 10 01:04:52.681827 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 10 01:04:52.681884 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 10 01:04:52.681947 kernel: pci 0000:0b:00.0: [15ad:07b0] type 00 class 0x020000 Jul 10 01:04:52.681999 kernel: pci 0000:0b:00.0: reg 0x10: [mem 0xfd4fc000-0xfd4fcfff] Jul 10 01:04:52.682052 kernel: pci 0000:0b:00.0: reg 0x14: [mem 0xfd4fd000-0xfd4fdfff] Jul 10 01:04:52.682109 kernel: pci 0000:0b:00.0: reg 0x18: [mem 0xfd4fe000-0xfd4fffff] Jul 10 01:04:52.682159 kernel: pci 0000:0b:00.0: reg 0x1c: [io 0x5000-0x500f] Jul 10 01:04:52.682212 kernel: pci 0000:0b:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 10 01:04:52.682280 kernel: pci 0000:0b:00.0: supports D1 D2 Jul 10 01:04:52.682348 kernel: pci 0000:0b:00.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 10 01:04:52.682405 kernel: pci 0000:0b:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 10 01:04:52.682479 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 10 01:04:52.682533 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 10 01:04:52.682588 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 10 01:04:52.682638 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 10 01:04:52.682691 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 10 01:04:52.682746 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 10 01:04:52.682797 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 10 01:04:52.682853 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 10 01:04:52.682909 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 10 01:04:52.682957 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 10 01:04:52.683005 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 10 01:04:52.683054 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 10 01:04:52.683102 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 10 01:04:52.683160 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 10 01:04:52.683210 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 10 01:04:52.683277 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 10 01:04:52.683334 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 10 01:04:52.683385 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 10 01:04:52.683439 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 10 01:04:52.683492 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 10 01:04:52.683541 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 10 01:04:52.683601 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 10 01:04:52.683664 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 10 01:04:52.683719 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 10 01:04:52.683774 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 10 01:04:52.683826 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 10 01:04:52.683885 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 10 01:04:52.683940 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 10 01:04:52.683989 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 10 01:04:52.684046 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 10 01:04:52.684105 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 10 01:04:52.684153 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 10 01:04:52.684205 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 10 01:04:52.684276 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 10 01:04:52.684328 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 10 01:04:52.684380 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 10 01:04:52.684435 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 10 01:04:52.684486 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 10 01:04:52.684535 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 10 01:04:52.684583 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 10 01:04:52.687278 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 10 01:04:52.687348 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 10 01:04:52.687410 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 10 01:04:52.687461 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 10 01:04:52.687514 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 10 01:04:52.687562 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 10 01:04:52.687609 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 10 01:04:52.687675 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 10 01:04:52.687738 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 10 01:04:52.687787 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 10 01:04:52.687835 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 10 01:04:52.687883 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 10 01:04:52.687929 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 10 01:04:52.687992 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 10 01:04:52.688041 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 10 01:04:52.688091 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 10 01:04:52.688143 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 10 01:04:52.688194 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 10 01:04:52.688264 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 10 01:04:52.690820 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 10 01:04:52.690879 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 10 01:04:52.690932 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 10 01:04:52.690991 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 10 01:04:52.691051 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 10 01:04:52.691102 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 10 01:04:52.691153 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 10 01:04:52.691213 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 10 01:04:52.691289 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 10 01:04:52.691343 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 10 01:04:52.691391 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 10 01:04:52.691441 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 10 01:04:52.691488 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 10 01:04:52.691551 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 10 01:04:52.691614 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 10 01:04:52.691668 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 10 01:04:52.691717 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 10 01:04:52.691770 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 10 01:04:52.691818 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 10 01:04:52.691864 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 10 01:04:52.691873 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 9 Jul 10 01:04:52.691879 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 0 Jul 10 01:04:52.691885 kernel: ACPI: PCI: Interrupt link LNKB disabled Jul 10 01:04:52.691891 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 10 01:04:52.691896 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 10 Jul 10 01:04:52.691902 kernel: iommu: Default domain type: Translated Jul 10 01:04:52.691909 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 10 01:04:52.691958 kernel: pci 0000:00:0f.0: vgaarb: setting as boot VGA device Jul 10 01:04:52.692005 kernel: pci 0000:00:0f.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 10 01:04:52.692056 kernel: pci 0000:00:0f.0: vgaarb: bridge control possible Jul 10 01:04:52.692065 kernel: vgaarb: loaded Jul 10 01:04:52.692071 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 01:04:52.692077 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 01:04:52.692082 kernel: PTP clock support registered Jul 10 01:04:52.692088 kernel: PCI: Using ACPI for IRQ routing Jul 10 01:04:52.692095 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 10 01:04:52.692101 kernel: e820: reserve RAM buffer [mem 0x0009ec00-0x0009ffff] Jul 10 01:04:52.692107 kernel: e820: reserve RAM buffer [mem 0x7fee0000-0x7fffffff] Jul 10 01:04:52.692113 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 Jul 10 01:04:52.692119 kernel: hpet0: 16 comparators, 64-bit 14.318180 MHz counter Jul 10 01:04:52.692125 kernel: clocksource: Switched to clocksource tsc-early Jul 10 01:04:52.692131 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 01:04:52.692136 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 01:04:52.692142 kernel: pnp: PnP ACPI init Jul 10 01:04:52.692199 kernel: system 00:00: [io 0x1000-0x103f] has been reserved Jul 10 01:04:52.692259 kernel: system 00:00: [io 0x1040-0x104f] has been reserved Jul 10 01:04:52.692306 kernel: system 00:00: [io 0x0cf0-0x0cf1] has been reserved Jul 10 01:04:52.692354 kernel: system 00:04: [mem 0xfed00000-0xfed003ff] has been reserved Jul 10 01:04:52.692402 kernel: pnp 00:06: [dma 2] Jul 10 01:04:52.692462 kernel: system 00:07: [io 0xfce0-0xfcff] has been reserved Jul 10 01:04:52.692512 kernel: system 00:07: [mem 0xf0000000-0xf7ffffff] has been reserved Jul 10 01:04:52.692556 kernel: system 00:07: [mem 0xfe800000-0xfe9fffff] has been reserved Jul 10 01:04:52.692564 kernel: pnp: PnP ACPI: found 8 devices Jul 10 01:04:52.692571 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 10 01:04:52.692577 kernel: NET: Registered PF_INET protocol family Jul 10 01:04:52.692583 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 01:04:52.692589 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 10 01:04:52.692594 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 01:04:52.692602 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 10 01:04:52.692607 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 10 01:04:52.692613 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 10 01:04:52.692619 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 10 01:04:52.692625 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 10 01:04:52.692630 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 01:04:52.692636 kernel: NET: Registered PF_XDP protocol family Jul 10 01:04:52.692686 kernel: pci 0000:00:15.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 03] add_size 200000 add_align 100000 Jul 10 01:04:52.692739 kernel: pci 0000:00:15.3: bridge window [io 0x1000-0x0fff] to [bus 06] add_size 1000 Jul 10 01:04:52.692791 kernel: pci 0000:00:15.4: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Jul 10 01:04:52.692841 kernel: pci 0000:00:15.5: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Jul 10 01:04:52.692891 kernel: pci 0000:00:15.6: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Jul 10 01:04:52.692945 kernel: pci 0000:00:15.7: bridge window [io 0x1000-0x0fff] to [bus 0a] add_size 1000 Jul 10 01:04:52.692995 kernel: pci 0000:00:16.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0b] add_size 200000 add_align 100000 Jul 10 01:04:52.693046 kernel: pci 0000:00:16.3: bridge window [io 0x1000-0x0fff] to [bus 0e] add_size 1000 Jul 10 01:04:52.693096 kernel: pci 0000:00:16.4: bridge window [io 0x1000-0x0fff] to [bus 0f] add_size 1000 Jul 10 01:04:52.693147 kernel: pci 0000:00:16.5: bridge window [io 0x1000-0x0fff] to [bus 10] add_size 1000 Jul 10 01:04:52.693196 kernel: pci 0000:00:16.6: bridge window [io 0x1000-0x0fff] to [bus 11] add_size 1000 Jul 10 01:04:52.693257 kernel: pci 0000:00:16.7: bridge window [io 0x1000-0x0fff] to [bus 12] add_size 1000 Jul 10 01:04:52.693317 kernel: pci 0000:00:17.3: bridge window [io 0x1000-0x0fff] to [bus 16] add_size 1000 Jul 10 01:04:52.693383 kernel: pci 0000:00:17.4: bridge window [io 0x1000-0x0fff] to [bus 17] add_size 1000 Jul 10 01:04:52.693432 kernel: pci 0000:00:17.5: bridge window [io 0x1000-0x0fff] to [bus 18] add_size 1000 Jul 10 01:04:52.693481 kernel: pci 0000:00:17.6: bridge window [io 0x1000-0x0fff] to [bus 19] add_size 1000 Jul 10 01:04:52.693531 kernel: pci 0000:00:17.7: bridge window [io 0x1000-0x0fff] to [bus 1a] add_size 1000 Jul 10 01:04:52.693578 kernel: pci 0000:00:18.2: bridge window [io 0x1000-0x0fff] to [bus 1d] add_size 1000 Jul 10 01:04:52.693627 kernel: pci 0000:00:18.3: bridge window [io 0x1000-0x0fff] to [bus 1e] add_size 1000 Jul 10 01:04:52.693681 kernel: pci 0000:00:18.4: bridge window [io 0x1000-0x0fff] to [bus 1f] add_size 1000 Jul 10 01:04:52.693731 kernel: pci 0000:00:18.5: bridge window [io 0x1000-0x0fff] to [bus 20] add_size 1000 Jul 10 01:04:52.693778 kernel: pci 0000:00:18.6: bridge window [io 0x1000-0x0fff] to [bus 21] add_size 1000 Jul 10 01:04:52.693825 kernel: pci 0000:00:18.7: bridge window [io 0x1000-0x0fff] to [bus 22] add_size 1000 Jul 10 01:04:52.693873 kernel: pci 0000:00:15.0: BAR 15: assigned [mem 0xc0000000-0xc01fffff 64bit pref] Jul 10 01:04:52.693922 kernel: pci 0000:00:16.0: BAR 15: assigned [mem 0xc0200000-0xc03fffff 64bit pref] Jul 10 01:04:52.693972 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.694019 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.694067 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.694114 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.694161 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.694227 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.694287 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.694345 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.700614 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.700676 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.700730 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.700781 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.700830 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.700883 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.700934 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.700989 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701048 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.701098 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701146 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.701193 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701268 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.701318 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701370 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.701429 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701483 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.701533 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701592 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.701641 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701689 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.701736 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701785 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.701832 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701884 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.701936 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.701985 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.702032 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.702080 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.702127 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.702176 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.702232 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.702288 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.702337 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.702384 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.702433 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.702500 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.707593 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.707662 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.707718 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.708021 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.708079 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.708136 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.708191 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.708342 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.708395 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.708456 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.708512 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.708565 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.708620 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.708674 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.708725 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.708777 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.708832 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.708885 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.708949 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.709010 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.709067 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.709359 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.709446 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.709805 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.709866 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.709923 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.709978 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.710034 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.710083 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.710132 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.710179 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.710245 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.710298 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.710355 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.710412 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.710465 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.710513 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.710562 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 10 01:04:52.710610 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 10 01:04:52.710665 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 10 01:04:52.710721 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] Jul 10 01:04:52.710770 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 10 01:04:52.710823 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 10 01:04:52.710877 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 10 01:04:52.710944 kernel: pci 0000:03:00.0: BAR 6: assigned [mem 0xfd500000-0xfd50ffff pref] Jul 10 01:04:52.710997 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 10 01:04:52.711052 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 10 01:04:52.711115 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 10 01:04:52.711164 kernel: pci 0000:00:15.0: bridge window [mem 0xc0000000-0xc01fffff 64bit pref] Jul 10 01:04:52.711233 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 10 01:04:52.711286 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 10 01:04:52.711333 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 10 01:04:52.711383 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 10 01:04:52.711773 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 10 01:04:52.711831 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 10 01:04:52.711885 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 10 01:04:52.711950 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 10 01:04:52.712145 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 10 01:04:52.712205 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 10 01:04:52.712291 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 10 01:04:52.712343 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 10 01:04:52.712570 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 10 01:04:52.712638 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 10 01:04:52.712706 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 10 01:04:52.712755 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 10 01:04:52.713119 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 10 01:04:52.713191 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 10 01:04:52.713296 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 10 01:04:52.713351 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 10 01:04:52.713422 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 10 01:04:52.713772 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 10 01:04:52.713835 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 10 01:04:52.713903 kernel: pci 0000:0b:00.0: BAR 6: assigned [mem 0xfd400000-0xfd40ffff pref] Jul 10 01:04:52.713956 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 10 01:04:52.714021 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 10 01:04:52.714080 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 10 01:04:52.714129 kernel: pci 0000:00:16.0: bridge window [mem 0xc0200000-0xc03fffff 64bit pref] Jul 10 01:04:52.714179 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 10 01:04:52.714284 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 10 01:04:52.714337 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 10 01:04:52.714386 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 10 01:04:52.714712 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 10 01:04:52.714785 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 10 01:04:52.714855 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 10 01:04:52.714909 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 10 01:04:52.714976 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 10 01:04:52.715034 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 10 01:04:52.715083 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 10 01:04:52.715132 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 10 01:04:52.715184 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 10 01:04:52.715259 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 10 01:04:52.715309 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 10 01:04:52.715362 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 10 01:04:52.715431 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 10 01:04:52.715502 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 10 01:04:52.715568 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 10 01:04:52.715617 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 10 01:04:52.715669 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 10 01:04:52.715734 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 10 01:04:52.715782 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 10 01:04:52.716148 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 10 01:04:52.716216 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 10 01:04:52.716314 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 10 01:04:52.716374 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 10 01:04:52.716424 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 10 01:04:52.716674 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 10 01:04:52.716745 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 10 01:04:52.716802 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 10 01:04:52.716851 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 10 01:04:52.717214 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 10 01:04:52.717281 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 10 01:04:52.717331 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 10 01:04:52.717380 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 10 01:04:52.717431 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 10 01:04:52.717479 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 10 01:04:52.717531 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 10 01:04:52.717597 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 10 01:04:52.717653 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 10 01:04:52.717707 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 10 01:04:52.717773 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 10 01:04:52.717822 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 10 01:04:52.717871 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 10 01:04:52.718301 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 10 01:04:52.718356 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 10 01:04:52.718408 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 10 01:04:52.718758 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 10 01:04:52.718831 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 10 01:04:52.718886 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 10 01:04:52.718939 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 10 01:04:52.719023 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 10 01:04:52.719077 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 10 01:04:52.719127 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 10 01:04:52.719177 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 10 01:04:52.719234 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 10 01:04:52.719592 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 10 01:04:52.719652 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 10 01:04:52.719721 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 10 01:04:52.719772 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 10 01:04:52.719837 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 10 01:04:52.719891 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 10 01:04:52.719940 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 10 01:04:52.720005 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 10 01:04:52.720064 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 10 01:04:52.720116 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 10 01:04:52.720183 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 10 01:04:52.720274 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 10 01:04:52.720341 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 10 01:04:52.720390 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 10 01:04:52.720438 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 10 01:04:52.720486 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 10 01:04:52.720741 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 10 01:04:52.720811 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 10 01:04:52.720862 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 10 01:04:52.721203 kernel: pci_bus 0000:00: resource 4 [mem 0x000a0000-0x000bffff window] Jul 10 01:04:52.721264 kernel: pci_bus 0000:00: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 10 01:04:52.721325 kernel: pci_bus 0000:00: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 10 01:04:52.721378 kernel: pci_bus 0000:00: resource 7 [io 0x0000-0x0cf7 window] Jul 10 01:04:52.721447 kernel: pci_bus 0000:00: resource 8 [io 0x0d00-0xfeff window] Jul 10 01:04:52.721591 kernel: pci_bus 0000:02: resource 0 [io 0x2000-0x3fff] Jul 10 01:04:52.721643 kernel: pci_bus 0000:02: resource 1 [mem 0xfd600000-0xfdffffff] Jul 10 01:04:52.721688 kernel: pci_bus 0000:02: resource 2 [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 10 01:04:52.721732 kernel: pci_bus 0000:02: resource 4 [mem 0x000a0000-0x000bffff window] Jul 10 01:04:52.722069 kernel: pci_bus 0000:02: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 10 01:04:52.722120 kernel: pci_bus 0000:02: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 10 01:04:52.722168 kernel: pci_bus 0000:02: resource 7 [io 0x0000-0x0cf7 window] Jul 10 01:04:52.722216 kernel: pci_bus 0000:02: resource 8 [io 0x0d00-0xfeff window] Jul 10 01:04:52.722292 kernel: pci_bus 0000:03: resource 0 [io 0x4000-0x4fff] Jul 10 01:04:52.722345 kernel: pci_bus 0000:03: resource 1 [mem 0xfd500000-0xfd5fffff] Jul 10 01:04:52.722391 kernel: pci_bus 0000:03: resource 2 [mem 0xc0000000-0xc01fffff 64bit pref] Jul 10 01:04:52.722479 kernel: pci_bus 0000:04: resource 0 [io 0x8000-0x8fff] Jul 10 01:04:52.722650 kernel: pci_bus 0000:04: resource 1 [mem 0xfd100000-0xfd1fffff] Jul 10 01:04:52.722705 kernel: pci_bus 0000:04: resource 2 [mem 0xe7800000-0xe78fffff 64bit pref] Jul 10 01:04:52.722755 kernel: pci_bus 0000:05: resource 0 [io 0xc000-0xcfff] Jul 10 01:04:52.722808 kernel: pci_bus 0000:05: resource 1 [mem 0xfcd00000-0xfcdfffff] Jul 10 01:04:52.722858 kernel: pci_bus 0000:05: resource 2 [mem 0xe7400000-0xe74fffff 64bit pref] Jul 10 01:04:52.722911 kernel: pci_bus 0000:06: resource 1 [mem 0xfc900000-0xfc9fffff] Jul 10 01:04:52.722961 kernel: pci_bus 0000:06: resource 2 [mem 0xe7000000-0xe70fffff 64bit pref] Jul 10 01:04:52.723025 kernel: pci_bus 0000:07: resource 1 [mem 0xfc500000-0xfc5fffff] Jul 10 01:04:52.723079 kernel: pci_bus 0000:07: resource 2 [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 10 01:04:52.723142 kernel: pci_bus 0000:08: resource 1 [mem 0xfc100000-0xfc1fffff] Jul 10 01:04:52.723202 kernel: pci_bus 0000:08: resource 2 [mem 0xe6800000-0xe68fffff 64bit pref] Jul 10 01:04:52.723293 kernel: pci_bus 0000:09: resource 1 [mem 0xfbd00000-0xfbdfffff] Jul 10 01:04:52.723351 kernel: pci_bus 0000:09: resource 2 [mem 0xe6400000-0xe64fffff 64bit pref] Jul 10 01:04:52.723401 kernel: pci_bus 0000:0a: resource 1 [mem 0xfb900000-0xfb9fffff] Jul 10 01:04:52.723454 kernel: pci_bus 0000:0a: resource 2 [mem 0xe6000000-0xe60fffff 64bit pref] Jul 10 01:04:52.723822 kernel: pci_bus 0000:0b: resource 0 [io 0x5000-0x5fff] Jul 10 01:04:52.723872 kernel: pci_bus 0000:0b: resource 1 [mem 0xfd400000-0xfd4fffff] Jul 10 01:04:52.723917 kernel: pci_bus 0000:0b: resource 2 [mem 0xc0200000-0xc03fffff 64bit pref] Jul 10 01:04:52.723966 kernel: pci_bus 0000:0c: resource 0 [io 0x9000-0x9fff] Jul 10 01:04:52.724011 kernel: pci_bus 0000:0c: resource 1 [mem 0xfd000000-0xfd0fffff] Jul 10 01:04:52.724058 kernel: pci_bus 0000:0c: resource 2 [mem 0xe7700000-0xe77fffff 64bit pref] Jul 10 01:04:52.724125 kernel: pci_bus 0000:0d: resource 0 [io 0xd000-0xdfff] Jul 10 01:04:52.724174 kernel: pci_bus 0000:0d: resource 1 [mem 0xfcc00000-0xfccfffff] Jul 10 01:04:52.724235 kernel: pci_bus 0000:0d: resource 2 [mem 0xe7300000-0xe73fffff 64bit pref] Jul 10 01:04:52.724297 kernel: pci_bus 0000:0e: resource 1 [mem 0xfc800000-0xfc8fffff] Jul 10 01:04:52.724343 kernel: pci_bus 0000:0e: resource 2 [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 10 01:04:52.724391 kernel: pci_bus 0000:0f: resource 1 [mem 0xfc400000-0xfc4fffff] Jul 10 01:04:52.724443 kernel: pci_bus 0000:0f: resource 2 [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 10 01:04:52.724637 kernel: pci_bus 0000:10: resource 1 [mem 0xfc000000-0xfc0fffff] Jul 10 01:04:52.724686 kernel: pci_bus 0000:10: resource 2 [mem 0xe6700000-0xe67fffff 64bit pref] Jul 10 01:04:52.724738 kernel: pci_bus 0000:11: resource 1 [mem 0xfbc00000-0xfbcfffff] Jul 10 01:04:52.725096 kernel: pci_bus 0000:11: resource 2 [mem 0xe6300000-0xe63fffff 64bit pref] Jul 10 01:04:52.725164 kernel: pci_bus 0000:12: resource 1 [mem 0xfb800000-0xfb8fffff] Jul 10 01:04:52.725212 kernel: pci_bus 0000:12: resource 2 [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 10 01:04:52.725288 kernel: pci_bus 0000:13: resource 0 [io 0x6000-0x6fff] Jul 10 01:04:52.725337 kernel: pci_bus 0000:13: resource 1 [mem 0xfd300000-0xfd3fffff] Jul 10 01:04:52.725406 kernel: pci_bus 0000:13: resource 2 [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 10 01:04:52.725481 kernel: pci_bus 0000:14: resource 0 [io 0xa000-0xafff] Jul 10 01:04:52.725533 kernel: pci_bus 0000:14: resource 1 [mem 0xfcf00000-0xfcffffff] Jul 10 01:04:52.725579 kernel: pci_bus 0000:14: resource 2 [mem 0xe7600000-0xe76fffff 64bit pref] Jul 10 01:04:52.725628 kernel: pci_bus 0000:15: resource 0 [io 0xe000-0xefff] Jul 10 01:04:52.725685 kernel: pci_bus 0000:15: resource 1 [mem 0xfcb00000-0xfcbfffff] Jul 10 01:04:52.725735 kernel: pci_bus 0000:15: resource 2 [mem 0xe7200000-0xe72fffff 64bit pref] Jul 10 01:04:52.725783 kernel: pci_bus 0000:16: resource 1 [mem 0xfc700000-0xfc7fffff] Jul 10 01:04:52.725839 kernel: pci_bus 0000:16: resource 2 [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 10 01:04:52.725893 kernel: pci_bus 0000:17: resource 1 [mem 0xfc300000-0xfc3fffff] Jul 10 01:04:52.725942 kernel: pci_bus 0000:17: resource 2 [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 10 01:04:52.726014 kernel: pci_bus 0000:18: resource 1 [mem 0xfbf00000-0xfbffffff] Jul 10 01:04:52.726061 kernel: pci_bus 0000:18: resource 2 [mem 0xe6600000-0xe66fffff 64bit pref] Jul 10 01:04:52.726110 kernel: pci_bus 0000:19: resource 1 [mem 0xfbb00000-0xfbbfffff] Jul 10 01:04:52.726168 kernel: pci_bus 0000:19: resource 2 [mem 0xe6200000-0xe62fffff 64bit pref] Jul 10 01:04:52.726218 kernel: pci_bus 0000:1a: resource 1 [mem 0xfb700000-0xfb7fffff] Jul 10 01:04:52.726328 kernel: pci_bus 0000:1a: resource 2 [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 10 01:04:52.726377 kernel: pci_bus 0000:1b: resource 0 [io 0x7000-0x7fff] Jul 10 01:04:52.726425 kernel: pci_bus 0000:1b: resource 1 [mem 0xfd200000-0xfd2fffff] Jul 10 01:04:52.726593 kernel: pci_bus 0000:1b: resource 2 [mem 0xe7900000-0xe79fffff 64bit pref] Jul 10 01:04:52.726646 kernel: pci_bus 0000:1c: resource 0 [io 0xb000-0xbfff] Jul 10 01:04:52.726692 kernel: pci_bus 0000:1c: resource 1 [mem 0xfce00000-0xfcefffff] Jul 10 01:04:52.726736 kernel: pci_bus 0000:1c: resource 2 [mem 0xe7500000-0xe75fffff 64bit pref] Jul 10 01:04:52.727090 kernel: pci_bus 0000:1d: resource 1 [mem 0xfca00000-0xfcafffff] Jul 10 01:04:52.727160 kernel: pci_bus 0000:1d: resource 2 [mem 0xe7100000-0xe71fffff 64bit pref] Jul 10 01:04:52.727214 kernel: pci_bus 0000:1e: resource 1 [mem 0xfc600000-0xfc6fffff] Jul 10 01:04:52.727268 kernel: pci_bus 0000:1e: resource 2 [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 10 01:04:52.727317 kernel: pci_bus 0000:1f: resource 1 [mem 0xfc200000-0xfc2fffff] Jul 10 01:04:52.727363 kernel: pci_bus 0000:1f: resource 2 [mem 0xe6900000-0xe69fffff 64bit pref] Jul 10 01:04:52.727412 kernel: pci_bus 0000:20: resource 1 [mem 0xfbe00000-0xfbefffff] Jul 10 01:04:52.727694 kernel: pci_bus 0000:20: resource 2 [mem 0xe6500000-0xe65fffff 64bit pref] Jul 10 01:04:52.727762 kernel: pci_bus 0000:21: resource 1 [mem 0xfba00000-0xfbafffff] Jul 10 01:04:52.727822 kernel: pci_bus 0000:21: resource 2 [mem 0xe6100000-0xe61fffff 64bit pref] Jul 10 01:04:52.727876 kernel: pci_bus 0000:22: resource 1 [mem 0xfb600000-0xfb6fffff] Jul 10 01:04:52.727948 kernel: pci_bus 0000:22: resource 2 [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 10 01:04:52.728278 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 10 01:04:52.728296 kernel: PCI: CLS 32 bytes, default 64 Jul 10 01:04:52.728304 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 10 01:04:52.728311 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 10 01:04:52.728317 kernel: clocksource: Switched to clocksource tsc Jul 10 01:04:52.728323 kernel: Initialise system trusted keyrings Jul 10 01:04:52.728329 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 10 01:04:52.728337 kernel: Key type asymmetric registered Jul 10 01:04:52.728343 kernel: Asymmetric key parser 'x509' registered Jul 10 01:04:52.728349 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 01:04:52.728356 kernel: io scheduler mq-deadline registered Jul 10 01:04:52.728362 kernel: io scheduler kyber registered Jul 10 01:04:52.728383 kernel: io scheduler bfq registered Jul 10 01:04:52.729291 kernel: pcieport 0000:00:15.0: PME: Signaling with IRQ 24 Jul 10 01:04:52.729358 kernel: pcieport 0000:00:15.0: pciehp: Slot #160 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.729419 kernel: pcieport 0000:00:15.1: PME: Signaling with IRQ 25 Jul 10 01:04:52.729787 kernel: pcieport 0000:00:15.1: pciehp: Slot #161 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.729865 kernel: pcieport 0000:00:15.2: PME: Signaling with IRQ 26 Jul 10 01:04:52.729921 kernel: pcieport 0000:00:15.2: pciehp: Slot #162 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.729980 kernel: pcieport 0000:00:15.3: PME: Signaling with IRQ 27 Jul 10 01:04:52.730042 kernel: pcieport 0000:00:15.3: pciehp: Slot #163 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.730096 kernel: pcieport 0000:00:15.4: PME: Signaling with IRQ 28 Jul 10 01:04:52.730147 kernel: pcieport 0000:00:15.4: pciehp: Slot #164 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.730208 kernel: pcieport 0000:00:15.5: PME: Signaling with IRQ 29 Jul 10 01:04:52.730297 kernel: pcieport 0000:00:15.5: pciehp: Slot #165 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.730352 kernel: pcieport 0000:00:15.6: PME: Signaling with IRQ 30 Jul 10 01:04:52.730409 kernel: pcieport 0000:00:15.6: pciehp: Slot #166 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.730785 kernel: pcieport 0000:00:15.7: PME: Signaling with IRQ 31 Jul 10 01:04:52.730850 kernel: pcieport 0000:00:15.7: pciehp: Slot #167 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.730906 kernel: pcieport 0000:00:16.0: PME: Signaling with IRQ 32 Jul 10 01:04:52.730956 kernel: pcieport 0000:00:16.0: pciehp: Slot #192 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.731006 kernel: pcieport 0000:00:16.1: PME: Signaling with IRQ 33 Jul 10 01:04:52.731055 kernel: pcieport 0000:00:16.1: pciehp: Slot #193 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.731104 kernel: pcieport 0000:00:16.2: PME: Signaling with IRQ 34 Jul 10 01:04:52.731153 kernel: pcieport 0000:00:16.2: pciehp: Slot #194 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.731201 kernel: pcieport 0000:00:16.3: PME: Signaling with IRQ 35 Jul 10 01:04:52.731275 kernel: pcieport 0000:00:16.3: pciehp: Slot #195 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.731328 kernel: pcieport 0000:00:16.4: PME: Signaling with IRQ 36 Jul 10 01:04:52.731376 kernel: pcieport 0000:00:16.4: pciehp: Slot #196 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.731443 kernel: pcieport 0000:00:16.5: PME: Signaling with IRQ 37 Jul 10 01:04:52.731500 kernel: pcieport 0000:00:16.5: pciehp: Slot #197 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.731553 kernel: pcieport 0000:00:16.6: PME: Signaling with IRQ 38 Jul 10 01:04:52.731615 kernel: pcieport 0000:00:16.6: pciehp: Slot #198 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.731666 kernel: pcieport 0000:00:16.7: PME: Signaling with IRQ 39 Jul 10 01:04:52.731714 kernel: pcieport 0000:00:16.7: pciehp: Slot #199 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.731775 kernel: pcieport 0000:00:17.0: PME: Signaling with IRQ 40 Jul 10 01:04:52.731824 kernel: pcieport 0000:00:17.0: pciehp: Slot #224 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.731892 kernel: pcieport 0000:00:17.1: PME: Signaling with IRQ 41 Jul 10 01:04:52.731956 kernel: pcieport 0000:00:17.1: pciehp: Slot #225 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732007 kernel: pcieport 0000:00:17.2: PME: Signaling with IRQ 42 Jul 10 01:04:52.732055 kernel: pcieport 0000:00:17.2: pciehp: Slot #226 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732105 kernel: pcieport 0000:00:17.3: PME: Signaling with IRQ 43 Jul 10 01:04:52.732154 kernel: pcieport 0000:00:17.3: pciehp: Slot #227 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732207 kernel: pcieport 0000:00:17.4: PME: Signaling with IRQ 44 Jul 10 01:04:52.732264 kernel: pcieport 0000:00:17.4: pciehp: Slot #228 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732315 kernel: pcieport 0000:00:17.5: PME: Signaling with IRQ 45 Jul 10 01:04:52.732364 kernel: pcieport 0000:00:17.5: pciehp: Slot #229 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732414 kernel: pcieport 0000:00:17.6: PME: Signaling with IRQ 46 Jul 10 01:04:52.732475 kernel: pcieport 0000:00:17.6: pciehp: Slot #230 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732529 kernel: pcieport 0000:00:17.7: PME: Signaling with IRQ 47 Jul 10 01:04:52.732585 kernel: pcieport 0000:00:17.7: pciehp: Slot #231 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732654 kernel: pcieport 0000:00:18.0: PME: Signaling with IRQ 48 Jul 10 01:04:52.732717 kernel: pcieport 0000:00:18.0: pciehp: Slot #256 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732780 kernel: pcieport 0000:00:18.1: PME: Signaling with IRQ 49 Jul 10 01:04:52.732832 kernel: pcieport 0000:00:18.1: pciehp: Slot #257 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732884 kernel: pcieport 0000:00:18.2: PME: Signaling with IRQ 50 Jul 10 01:04:52.732932 kernel: pcieport 0000:00:18.2: pciehp: Slot #258 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.732981 kernel: pcieport 0000:00:18.3: PME: Signaling with IRQ 51 Jul 10 01:04:52.733196 kernel: pcieport 0000:00:18.3: pciehp: Slot #259 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.733289 kernel: pcieport 0000:00:18.4: PME: Signaling with IRQ 52 Jul 10 01:04:52.733345 kernel: pcieport 0000:00:18.4: pciehp: Slot #260 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.733397 kernel: pcieport 0000:00:18.5: PME: Signaling with IRQ 53 Jul 10 01:04:52.733664 kernel: pcieport 0000:00:18.5: pciehp: Slot #261 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.733729 kernel: pcieport 0000:00:18.6: PME: Signaling with IRQ 54 Jul 10 01:04:52.733780 kernel: pcieport 0000:00:18.6: pciehp: Slot #262 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.733863 kernel: pcieport 0000:00:18.7: PME: Signaling with IRQ 55 Jul 10 01:04:52.734183 kernel: pcieport 0000:00:18.7: pciehp: Slot #263 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 10 01:04:52.734199 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 10 01:04:52.734206 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 01:04:52.734213 kernel: 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 10 01:04:52.734417 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBC,PNP0f13:MOUS] at 0x60,0x64 irq 1,12 Jul 10 01:04:52.734425 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 10 01:04:52.734432 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 10 01:04:52.734503 kernel: rtc_cmos 00:01: registered as rtc0 Jul 10 01:04:52.734559 kernel: rtc_cmos 00:01: setting system clock to 2025-07-10T01:04:52 UTC (1752109492) Jul 10 01:04:52.734604 kernel: rtc_cmos 00:01: alarms up to one month, y3k, 114 bytes nvram Jul 10 01:04:52.734612 kernel: intel_pstate: CPU model not supported Jul 10 01:04:52.734618 kernel: NET: Registered PF_INET6 protocol family Jul 10 01:04:52.734625 kernel: Segment Routing with IPv6 Jul 10 01:04:52.734631 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 01:04:52.734637 kernel: NET: Registered PF_PACKET protocol family Jul 10 01:04:52.734663 kernel: Key type dns_resolver registered Jul 10 01:04:52.734671 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 10 01:04:52.734678 kernel: IPI shorthand broadcast: enabled Jul 10 01:04:52.734685 kernel: sched_clock: Marking stable (880246555, 238713015)->(1190467450, -71507880) Jul 10 01:04:52.734691 kernel: registered taskstats version 1 Jul 10 01:04:52.734697 kernel: Loading compiled-in X.509 certificates Jul 10 01:04:52.734703 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 6ebecdd7757c0df63fc51731f0b99957f4e4af16' Jul 10 01:04:52.735201 kernel: Key type .fscrypt registered Jul 10 01:04:52.735209 kernel: Key type fscrypt-provisioning registered Jul 10 01:04:52.735217 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 01:04:52.735234 kernel: ima: Allocated hash algorithm: sha1 Jul 10 01:04:52.735240 kernel: ima: No architecture policies found Jul 10 01:04:52.735247 kernel: clk: Disabling unused clocks Jul 10 01:04:52.735253 kernel: Freeing unused kernel image (initmem) memory: 47472K Jul 10 01:04:52.735259 kernel: Write protecting the kernel read-only data: 28672k Jul 10 01:04:52.735266 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 10 01:04:52.735272 kernel: Freeing unused kernel image (rodata/data gap) memory: 612K Jul 10 01:04:52.735278 kernel: Run /init as init process Jul 10 01:04:52.735286 kernel: with arguments: Jul 10 01:04:52.735293 kernel: /init Jul 10 01:04:52.735303 kernel: with environment: Jul 10 01:04:52.735310 kernel: HOME=/ Jul 10 01:04:52.735318 kernel: TERM=linux Jul 10 01:04:52.735327 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 01:04:52.735335 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 01:04:52.735343 systemd[1]: Detected virtualization vmware. Jul 10 01:04:52.735352 systemd[1]: Detected architecture x86-64. Jul 10 01:04:52.735358 systemd[1]: Running in initrd. Jul 10 01:04:52.735365 systemd[1]: No hostname configured, using default hostname. Jul 10 01:04:52.735370 systemd[1]: Hostname set to . Jul 10 01:04:52.735377 systemd[1]: Initializing machine ID from random generator. Jul 10 01:04:52.735475 systemd[1]: Queued start job for default target initrd.target. Jul 10 01:04:52.735484 systemd[1]: Started systemd-ask-password-console.path. Jul 10 01:04:52.735491 systemd[1]: Reached target cryptsetup.target. Jul 10 01:04:52.735498 systemd[1]: Reached target paths.target. Jul 10 01:04:52.735505 systemd[1]: Reached target slices.target. Jul 10 01:04:52.735511 systemd[1]: Reached target swap.target. Jul 10 01:04:52.735517 systemd[1]: Reached target timers.target. Jul 10 01:04:52.735524 systemd[1]: Listening on iscsid.socket. Jul 10 01:04:52.735531 systemd[1]: Listening on iscsiuio.socket. Jul 10 01:04:52.735537 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 01:04:52.735543 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 01:04:52.735550 systemd[1]: Listening on systemd-journald.socket. Jul 10 01:04:52.735556 systemd[1]: Listening on systemd-networkd.socket. Jul 10 01:04:52.735563 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 01:04:52.735569 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 01:04:52.735575 systemd[1]: Reached target sockets.target. Jul 10 01:04:52.735581 systemd[1]: Starting kmod-static-nodes.service... Jul 10 01:04:52.735587 systemd[1]: Finished network-cleanup.service. Jul 10 01:04:52.735593 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 01:04:52.735600 systemd[1]: Starting systemd-journald.service... Jul 10 01:04:52.735607 systemd[1]: Starting systemd-modules-load.service... Jul 10 01:04:52.735613 systemd[1]: Starting systemd-resolved.service... Jul 10 01:04:52.735619 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 01:04:52.735625 systemd[1]: Finished kmod-static-nodes.service. Jul 10 01:04:52.735631 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 01:04:52.735638 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 01:04:52.735644 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 01:04:52.735651 kernel: audit: type=1130 audit(1752109492.658:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.735658 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 01:04:52.735664 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 01:04:52.735671 kernel: audit: type=1130 audit(1752109492.687:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.735677 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 01:04:52.735683 kernel: audit: type=1130 audit(1752109492.693:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.735690 systemd[1]: Starting dracut-cmdline.service... Jul 10 01:04:52.735696 systemd[1]: Started systemd-resolved.service. Jul 10 01:04:52.735702 systemd[1]: Reached target nss-lookup.target. Jul 10 01:04:52.735711 kernel: audit: type=1130 audit(1752109492.701:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.735717 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 01:04:52.735723 kernel: Bridge firewalling registered Jul 10 01:04:52.735734 systemd-journald[217]: Journal started Jul 10 01:04:52.735769 systemd-journald[217]: Runtime Journal (/run/log/journal/2305fe6c99724d778f80e7b9041ef2c4) is 4.8M, max 38.8M, 34.0M free. Jul 10 01:04:52.658000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.693000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.658888 systemd-modules-load[218]: Inserted module 'overlay' Jul 10 01:04:52.740857 systemd[1]: Started systemd-journald.service. Jul 10 01:04:52.740873 kernel: SCSI subsystem initialized Jul 10 01:04:52.698175 systemd-resolved[219]: Positive Trust Anchors: Jul 10 01:04:52.698181 systemd-resolved[219]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 01:04:52.698200 systemd-resolved[219]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 01:04:52.699980 systemd-resolved[219]: Defaulting to hostname 'linux'. Jul 10 01:04:52.717949 systemd-modules-load[218]: Inserted module 'br_netfilter' Jul 10 01:04:52.742243 dracut-cmdline[233]: dracut-dracut-053 Jul 10 01:04:52.742243 dracut-cmdline[233]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Jul 10 01:04:52.742243 dracut-cmdline[233]: BEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=6cddad5f675165861f6062277cc28875548c735477e689762fc73abc16b63a3d Jul 10 01:04:52.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.746235 kernel: audit: type=1130 audit(1752109492.741:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.749318 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 01:04:52.749344 kernel: device-mapper: uevent: version 1.0.3 Jul 10 01:04:52.749354 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 01:04:52.752794 systemd-modules-load[218]: Inserted module 'dm_multipath' Jul 10 01:04:52.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.753256 systemd[1]: Finished systemd-modules-load.service. Jul 10 01:04:52.756231 kernel: audit: type=1130 audit(1752109492.752:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.756351 systemd[1]: Starting systemd-sysctl.service... Jul 10 01:04:52.760290 systemd[1]: Finished systemd-sysctl.service. Jul 10 01:04:52.762956 kernel: audit: type=1130 audit(1752109492.759:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.773234 kernel: Loading iSCSI transport class v2.0-870. Jul 10 01:04:52.786238 kernel: iscsi: registered transport (tcp) Jul 10 01:04:52.803244 kernel: iscsi: registered transport (qla4xxx) Jul 10 01:04:52.803290 kernel: QLogic iSCSI HBA Driver Jul 10 01:04:52.820451 systemd[1]: Finished dracut-cmdline.service. Jul 10 01:04:52.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.821078 systemd[1]: Starting dracut-pre-udev.service... Jul 10 01:04:52.824234 kernel: audit: type=1130 audit(1752109492.819:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:52.858233 kernel: raid6: avx2x4 gen() 47988 MB/s Jul 10 01:04:52.875238 kernel: raid6: avx2x4 xor() 21362 MB/s Jul 10 01:04:52.892238 kernel: raid6: avx2x2 gen() 50660 MB/s Jul 10 01:04:52.909241 kernel: raid6: avx2x2 xor() 29310 MB/s Jul 10 01:04:52.926244 kernel: raid6: avx2x1 gen() 41534 MB/s Jul 10 01:04:52.943243 kernel: raid6: avx2x1 xor() 24820 MB/s Jul 10 01:04:52.960240 kernel: raid6: sse2x4 gen() 19687 MB/s Jul 10 01:04:52.977245 kernel: raid6: sse2x4 xor() 11428 MB/s Jul 10 01:04:52.994237 kernel: raid6: sse2x2 gen() 20963 MB/s Jul 10 01:04:53.011233 kernel: raid6: sse2x2 xor() 13273 MB/s Jul 10 01:04:53.028267 kernel: raid6: sse2x1 gen() 17857 MB/s Jul 10 01:04:53.045493 kernel: raid6: sse2x1 xor() 8852 MB/s Jul 10 01:04:53.045516 kernel: raid6: using algorithm avx2x2 gen() 50660 MB/s Jul 10 01:04:53.045525 kernel: raid6: .... xor() 29310 MB/s, rmw enabled Jul 10 01:04:53.046666 kernel: raid6: using avx2x2 recovery algorithm Jul 10 01:04:53.055233 kernel: xor: automatically using best checksumming function avx Jul 10 01:04:53.130242 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 10 01:04:53.135702 systemd[1]: Finished dracut-pre-udev.service. Jul 10 01:04:53.136526 systemd[1]: Starting systemd-udevd.service... Jul 10 01:04:53.134000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:53.134000 audit: BPF prog-id=7 op=LOAD Jul 10 01:04:53.134000 audit: BPF prog-id=8 op=LOAD Jul 10 01:04:53.142241 kernel: audit: type=1130 audit(1752109493.134:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:53.147747 systemd-udevd[416]: Using default interface naming scheme 'v252'. Jul 10 01:04:53.150518 systemd[1]: Started systemd-udevd.service. Jul 10 01:04:53.149000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:53.151098 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 01:04:53.159776 dracut-pre-trigger[417]: rd.md=0: removing MD RAID activation Jul 10 01:04:53.176736 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 01:04:53.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:53.177322 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 01:04:53.242924 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 01:04:53.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:53.300235 kernel: VMware PVSCSI driver - version 1.0.7.0-k Jul 10 01:04:53.308264 kernel: vmw_pvscsi: using 64bit dma Jul 10 01:04:53.308307 kernel: vmw_pvscsi: max_id: 16 Jul 10 01:04:53.308320 kernel: vmw_pvscsi: setting ring_pages to 8 Jul 10 01:04:53.321240 kernel: libata version 3.00 loaded. Jul 10 01:04:53.325696 kernel: VMware vmxnet3 virtual NIC driver - version 1.6.0.0-k-NAPI Jul 10 01:04:53.325730 kernel: ata_piix 0000:00:07.1: version 2.13 Jul 10 01:04:53.341488 kernel: vmxnet3 0000:0b:00.0: # of Tx queues : 2, # of Rx queues : 2 Jul 10 01:04:53.341577 kernel: scsi host1: ata_piix Jul 10 01:04:53.341658 kernel: vmw_pvscsi: enabling reqCallThreshold Jul 10 01:04:53.341667 kernel: vmw_pvscsi: driver-based request coalescing enabled Jul 10 01:04:53.341674 kernel: vmw_pvscsi: using MSI-X Jul 10 01:04:53.341684 kernel: scsi host0: VMware PVSCSI storage adapter rev 2, req/cmp/msg rings: 8/8/1 pages, cmd_per_lun=254 Jul 10 01:04:53.341765 kernel: vmw_pvscsi 0000:03:00.0: VMware PVSCSI rev 2 host #0 Jul 10 01:04:53.341836 kernel: scsi 0:0:0:0: Direct-Access VMware Virtual disk 2.0 PQ: 0 ANSI: 6 Jul 10 01:04:53.341929 kernel: scsi host2: ata_piix Jul 10 01:04:53.342003 kernel: vmxnet3 0000:0b:00.0 eth0: NIC Link is Up 10000 Mbps Jul 10 01:04:53.342070 kernel: ata1: PATA max UDMA/33 cmd 0x1f0 ctl 0x3f6 bmdma 0x1060 irq 14 Jul 10 01:04:53.342079 kernel: ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0x1068 irq 15 Jul 10 01:04:53.346239 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 01:04:53.354236 kernel: vmxnet3 0000:0b:00.0 ens192: renamed from eth0 Jul 10 01:04:53.504249 kernel: ata2.00: ATAPI: VMware Virtual IDE CDROM Drive, 00000001, max UDMA/33 Jul 10 01:04:53.508256 kernel: scsi 2:0:0:0: CD-ROM NECVMWar VMware IDE CDR10 1.00 PQ: 0 ANSI: 5 Jul 10 01:04:53.520235 kernel: AVX2 version of gcm_enc/dec engaged. Jul 10 01:04:53.525633 kernel: sd 0:0:0:0: [sda] 17805312 512-byte logical blocks: (9.12 GB/8.49 GiB) Jul 10 01:04:53.647712 kernel: sd 0:0:0:0: [sda] Write Protect is off Jul 10 01:04:53.647833 kernel: sd 0:0:0:0: [sda] Mode Sense: 31 00 00 00 Jul 10 01:04:53.647921 kernel: AES CTR mode by8 optimization enabled Jul 10 01:04:53.647934 kernel: sd 0:0:0:0: [sda] Cache data unavailable Jul 10 01:04:53.648014 kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through Jul 10 01:04:53.648093 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 1x/1x writer dvd-ram cd/rw xa/form2 cdda tray Jul 10 01:04:53.648192 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 10 01:04:53.648204 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 10 01:04:53.648303 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 10 01:04:53.648314 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Jul 10 01:04:53.770522 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 01:04:53.772795 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 01:04:53.774175 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (475) Jul 10 01:04:53.779896 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 01:04:53.780046 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 01:04:53.780752 systemd[1]: Starting disk-uuid.service... Jul 10 01:04:53.784623 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 01:04:53.920246 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 10 01:04:53.953245 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 10 01:04:55.006049 disk-uuid[550]: The operation has completed successfully. Jul 10 01:04:55.006243 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 10 01:04:55.091049 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 01:04:55.091387 systemd[1]: Finished disk-uuid.service. Jul 10 01:04:55.090000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:55.090000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:55.092163 systemd[1]: Starting verity-setup.service... Jul 10 01:04:55.114240 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 10 01:04:55.264630 systemd[1]: Found device dev-mapper-usr.device. Jul 10 01:04:55.265855 systemd[1]: Mounting sysusr-usr.mount... Jul 10 01:04:55.267337 systemd[1]: Finished verity-setup.service. Jul 10 01:04:55.266000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:55.338185 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 01:04:55.337030 systemd[1]: Mounted sysusr-usr.mount. Jul 10 01:04:55.337620 systemd[1]: Starting afterburn-network-kargs.service... Jul 10 01:04:55.338081 systemd[1]: Starting ignition-setup.service... Jul 10 01:04:55.418860 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 01:04:55.418908 kernel: BTRFS info (device sda6): using free space tree Jul 10 01:04:55.418927 kernel: BTRFS info (device sda6): has skinny extents Jul 10 01:04:55.469241 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 10 01:04:55.504561 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 01:04:55.540313 systemd[1]: Finished ignition-setup.service. Jul 10 01:04:55.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:55.541156 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 01:04:55.971785 systemd[1]: Finished afterburn-network-kargs.service. Jul 10 01:04:55.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:55.972487 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 01:04:56.013817 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 01:04:56.014679 systemd[1]: Starting systemd-networkd.service... Jul 10 01:04:56.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.013000 audit: BPF prog-id=9 op=LOAD Jul 10 01:04:56.029102 systemd-networkd[735]: lo: Link UP Jul 10 01:04:56.029109 systemd-networkd[735]: lo: Gained carrier Jul 10 01:04:56.029421 systemd-networkd[735]: Enumeration completed Jul 10 01:04:56.033794 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 10 01:04:56.033954 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 10 01:04:56.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.029624 systemd-networkd[735]: ens192: Configuring with /etc/systemd/network/10-dracut-cmdline-99.network. Jul 10 01:04:56.029713 systemd[1]: Started systemd-networkd.service. Jul 10 01:04:56.029854 systemd[1]: Reached target network.target. Jul 10 01:04:56.030336 systemd[1]: Starting iscsiuio.service... Jul 10 01:04:56.033648 systemd-networkd[735]: ens192: Link UP Jul 10 01:04:56.033650 systemd-networkd[735]: ens192: Gained carrier Jul 10 01:04:56.035492 systemd[1]: Started iscsiuio.service. Jul 10 01:04:56.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.036105 systemd[1]: Starting iscsid.service... Jul 10 01:04:56.038065 iscsid[740]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 01:04:56.038065 iscsid[740]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 01:04:56.038065 iscsid[740]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 01:04:56.038065 iscsid[740]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 01:04:56.038065 iscsid[740]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 01:04:56.038065 iscsid[740]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 01:04:56.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.039057 systemd[1]: Started iscsid.service. Jul 10 01:04:56.039580 systemd[1]: Starting dracut-initqueue.service... Jul 10 01:04:56.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.046591 systemd[1]: Finished dracut-initqueue.service. Jul 10 01:04:56.046789 systemd[1]: Reached target remote-fs-pre.target. Jul 10 01:04:56.046881 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 01:04:56.046972 systemd[1]: Reached target remote-fs.target. Jul 10 01:04:56.047542 systemd[1]: Starting dracut-pre-mount.service... Jul 10 01:04:56.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.052510 systemd[1]: Finished dracut-pre-mount.service. Jul 10 01:04:56.533971 ignition[606]: Ignition 2.14.0 Jul 10 01:04:56.534438 ignition[606]: Stage: fetch-offline Jul 10 01:04:56.534685 ignition[606]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:04:56.534943 ignition[606]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:04:56.555277 ignition[606]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:04:56.555676 ignition[606]: parsed url from cmdline: "" Jul 10 01:04:56.555735 ignition[606]: no config URL provided Jul 10 01:04:56.555880 ignition[606]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 01:04:56.556044 ignition[606]: no config at "/usr/lib/ignition/user.ign" Jul 10 01:04:56.594544 ignition[606]: config successfully fetched Jul 10 01:04:56.594584 ignition[606]: parsing config with SHA512: ef10d5b0688ffbdfebd3a7b6756b2b5bdd15de3ffd36282bf43dec8091cdc93b1b931645a9f407fd18e1a6214c09f4aa5422c5b36ec04bad6a0b77f302a8252b Jul 10 01:04:56.607820 unknown[606]: fetched base config from "system" Jul 10 01:04:56.608023 unknown[606]: fetched user config from "vmware" Jul 10 01:04:56.608578 ignition[606]: fetch-offline: fetch-offline passed Jul 10 01:04:56.608758 ignition[606]: Ignition finished successfully Jul 10 01:04:56.608000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.609449 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 01:04:56.609605 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 01:04:56.610102 systemd[1]: Starting ignition-kargs.service... Jul 10 01:04:56.615591 ignition[754]: Ignition 2.14.0 Jul 10 01:04:56.615827 ignition[754]: Stage: kargs Jul 10 01:04:56.615999 ignition[754]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:04:56.616151 ignition[754]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:04:56.617466 ignition[754]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:04:56.618864 ignition[754]: kargs: kargs passed Jul 10 01:04:56.619446 ignition[754]: Ignition finished successfully Jul 10 01:04:56.619000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.620326 systemd[1]: Finished ignition-kargs.service. Jul 10 01:04:56.620920 systemd[1]: Starting ignition-disks.service... Jul 10 01:04:56.625790 ignition[760]: Ignition 2.14.0 Jul 10 01:04:56.625798 ignition[760]: Stage: disks Jul 10 01:04:56.625869 ignition[760]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:04:56.625881 ignition[760]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:04:56.627161 ignition[760]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:04:56.628667 ignition[760]: disks: disks passed Jul 10 01:04:56.628697 ignition[760]: Ignition finished successfully Jul 10 01:04:56.628000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.629452 systemd[1]: Finished ignition-disks.service. Jul 10 01:04:56.629616 systemd[1]: Reached target initrd-root-device.target. Jul 10 01:04:56.629708 systemd[1]: Reached target local-fs-pre.target. Jul 10 01:04:56.629794 systemd[1]: Reached target local-fs.target. Jul 10 01:04:56.629876 systemd[1]: Reached target sysinit.target. Jul 10 01:04:56.629957 systemd[1]: Reached target basic.target. Jul 10 01:04:56.630546 systemd[1]: Starting systemd-fsck-root.service... Jul 10 01:04:56.755033 systemd-fsck[768]: ROOT: clean, 619/1628000 files, 124060/1617920 blocks Jul 10 01:04:56.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.762763 systemd[1]: Finished systemd-fsck-root.service. Jul 10 01:04:56.766193 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 10 01:04:56.766207 kernel: audit: type=1130 audit(1752109496.761:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:56.766260 systemd[1]: Mounting sysroot.mount... Jul 10 01:04:56.869007 systemd[1]: Mounted sysroot.mount. Jul 10 01:04:56.869239 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 01:04:56.869421 systemd[1]: Reached target initrd-root-fs.target. Jul 10 01:04:56.876813 systemd[1]: Mounting sysroot-usr.mount... Jul 10 01:04:56.877452 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 01:04:56.877672 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 01:04:56.877905 systemd[1]: Reached target ignition-diskful.target. Jul 10 01:04:56.878935 systemd[1]: Mounted sysroot-usr.mount. Jul 10 01:04:56.897483 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 01:04:56.898201 systemd[1]: Starting initrd-setup-root.service... Jul 10 01:04:56.902464 initrd-setup-root[779]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 01:04:56.918404 initrd-setup-root[787]: cut: /sysroot/etc/group: No such file or directory Jul 10 01:04:56.926216 initrd-setup-root[795]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 01:04:56.936502 initrd-setup-root[803]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 01:04:56.992265 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (774) Jul 10 01:04:57.003489 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 01:04:57.003523 kernel: BTRFS info (device sda6): using free space tree Jul 10 01:04:57.003535 kernel: BTRFS info (device sda6): has skinny extents Jul 10 01:04:57.048254 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 10 01:04:57.065531 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 01:04:57.184714 systemd[1]: Finished initrd-setup-root.service. Jul 10 01:04:57.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:57.185580 systemd[1]: Starting ignition-mount.service... Jul 10 01:04:57.190245 kernel: audit: type=1130 audit(1752109497.183:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:57.186256 systemd[1]: Starting sysroot-boot.service... Jul 10 01:04:57.192940 systemd[1]: sysusr-usr-share-oem.mount: Deactivated successfully. Jul 10 01:04:57.193024 systemd[1]: sysroot-usr-share-oem.mount: Deactivated successfully. Jul 10 01:04:57.203466 ignition[839]: INFO : Ignition 2.14.0 Jul 10 01:04:57.203803 ignition[839]: INFO : Stage: mount Jul 10 01:04:57.203985 ignition[839]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:04:57.204143 ignition[839]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:04:57.209871 ignition[839]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:04:57.211373 ignition[839]: INFO : mount: mount passed Jul 10 01:04:57.211535 ignition[839]: INFO : Ignition finished successfully Jul 10 01:04:57.212151 systemd[1]: Finished ignition-mount.service. Jul 10 01:04:57.211000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:57.216235 kernel: audit: type=1130 audit(1752109497.211:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:57.215390 systemd[1]: Starting ignition-files.service... Jul 10 01:04:57.219436 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 01:04:57.314244 kernel: BTRFS: device label OEM devid 1 transid 12 /dev/sda6 scanned by mount (846) Jul 10 01:04:57.320496 systemd[1]: Finished sysroot-boot.service. Jul 10 01:04:57.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:57.324686 kernel: audit: type=1130 audit(1752109497.319:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:57.324709 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 10 01:04:57.324253 systemd-networkd[735]: ens192: Gained IPv6LL Jul 10 01:04:57.327127 kernel: BTRFS info (device sda6): using free space tree Jul 10 01:04:57.327143 kernel: BTRFS info (device sda6): has skinny extents Jul 10 01:04:57.385250 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 10 01:04:57.409108 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 01:04:57.416437 ignition[868]: INFO : Ignition 2.14.0 Jul 10 01:04:57.416437 ignition[868]: INFO : Stage: files Jul 10 01:04:57.416866 ignition[868]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:04:57.416866 ignition[868]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:04:57.418271 ignition[868]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:04:57.439831 ignition[868]: DEBUG : files: compiled without relabeling support, skipping Jul 10 01:04:57.447068 ignition[868]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 01:04:57.447068 ignition[868]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 01:04:57.466956 ignition[868]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 01:04:57.467286 ignition[868]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 01:04:57.476022 unknown[868]: wrote ssh authorized keys file for user: core Jul 10 01:04:57.476580 ignition[868]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 01:04:57.479261 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 10 01:04:57.479502 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Jul 10 01:04:57.519940 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 01:04:57.640279 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 10 01:04:57.640532 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 01:04:57.640532 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 01:04:57.640532 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 01:04:57.641142 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 01:04:57.641306 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 01:04:57.641306 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 01:04:57.641306 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 01:04:57.641762 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 01:04:57.645996 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 01:04:57.646203 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 01:04:57.646203 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 01:04:57.646203 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 01:04:57.650906 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 10 01:04:57.651087 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Jul 10 01:04:57.653895 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1119765832" Jul 10 01:04:57.654085 ignition[868]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1119765832": device or resource busy Jul 10 01:04:57.654085 ignition[868]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1119765832", trying btrfs: device or resource busy Jul 10 01:04:57.654085 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1119765832" Jul 10 01:04:57.654085 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1119765832" Jul 10 01:04:57.664038 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem1119765832" Jul 10 01:04:57.664237 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem1119765832" Jul 10 01:04:57.664237 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 10 01:04:57.664237 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 01:04:57.664237 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Jul 10 01:04:58.429167 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET result: OK Jul 10 01:04:58.640053 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 10 01:04:58.640728 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 10 01:04:58.641019 ignition[868]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 10 01:04:58.641229 ignition[868]: INFO : files: op(10): [started] processing unit "vmtoolsd.service" Jul 10 01:04:58.641378 ignition[868]: INFO : files: op(10): [finished] processing unit "vmtoolsd.service" Jul 10 01:04:58.641529 ignition[868]: INFO : files: op(11): [started] processing unit "prepare-helm.service" Jul 10 01:04:58.641702 ignition[868]: INFO : files: op(11): op(12): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 01:04:58.641949 ignition[868]: INFO : files: op(11): op(12): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 01:04:58.642143 ignition[868]: INFO : files: op(11): [finished] processing unit "prepare-helm.service" Jul 10 01:04:58.642303 ignition[868]: INFO : files: op(13): [started] processing unit "coreos-metadata.service" Jul 10 01:04:58.642489 ignition[868]: INFO : files: op(13): op(14): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 01:04:58.642742 ignition[868]: INFO : files: op(13): op(14): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 01:04:58.642942 ignition[868]: INFO : files: op(13): [finished] processing unit "coreos-metadata.service" Jul 10 01:04:58.643095 ignition[868]: INFO : files: op(15): [started] setting preset to enabled for "vmtoolsd.service" Jul 10 01:04:58.643302 ignition[868]: INFO : files: op(15): [finished] setting preset to enabled for "vmtoolsd.service" Jul 10 01:04:58.643461 ignition[868]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Jul 10 01:04:58.643636 ignition[868]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 01:04:58.643796 ignition[868]: INFO : files: op(17): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 01:04:58.643960 ignition[868]: INFO : files: op(17): op(18): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 01:04:58.729205 ignition[868]: INFO : files: op(17): op(18): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 01:04:58.729493 ignition[868]: INFO : files: op(17): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 01:04:58.729793 ignition[868]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 01:04:58.730066 ignition[868]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 01:04:58.730282 ignition[868]: INFO : files: files passed Jul 10 01:04:58.730448 ignition[868]: INFO : Ignition finished successfully Jul 10 01:04:58.731271 systemd[1]: Finished ignition-files.service. Jul 10 01:04:58.730000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.732618 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 01:04:58.735381 kernel: audit: type=1130 audit(1752109498.730:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.734024 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 01:04:58.734526 systemd[1]: Starting ignition-quench.service... Jul 10 01:04:58.742913 initrd-setup-root-after-ignition[894]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 01:04:58.743086 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 01:04:58.748054 kernel: audit: type=1130 audit(1752109498.742:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.748072 kernel: audit: type=1131 audit(1752109498.742:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.742000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.743140 systemd[1]: Finished ignition-quench.service. Jul 10 01:04:58.746454 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 01:04:58.750966 kernel: audit: type=1130 audit(1752109498.746:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.746000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.748155 systemd[1]: Reached target ignition-complete.target. Jul 10 01:04:58.751370 systemd[1]: Starting initrd-parse-etc.service... Jul 10 01:04:58.759749 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 01:04:58.759971 systemd[1]: Finished initrd-parse-etc.service. Jul 10 01:04:58.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.760257 systemd[1]: Reached target initrd-fs.target. Jul 10 01:04:58.765285 kernel: audit: type=1130 audit(1752109498.758:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.765306 kernel: audit: type=1131 audit(1752109498.758:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.758000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.765462 systemd[1]: Reached target initrd.target. Jul 10 01:04:58.765728 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 01:04:58.766498 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 01:04:58.773620 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 01:04:58.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.774549 systemd[1]: Starting initrd-cleanup.service... Jul 10 01:04:58.781245 systemd[1]: Stopped target nss-lookup.target. Jul 10 01:04:58.781593 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 01:04:58.781883 systemd[1]: Stopped target timers.target. Jul 10 01:04:58.782191 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 01:04:58.782445 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 01:04:58.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.782875 systemd[1]: Stopped target initrd.target. Jul 10 01:04:58.783197 systemd[1]: Stopped target basic.target. Jul 10 01:04:58.783480 systemd[1]: Stopped target ignition-complete.target. Jul 10 01:04:58.783768 systemd[1]: Stopped target ignition-diskful.target. Jul 10 01:04:58.784052 systemd[1]: Stopped target initrd-root-device.target. Jul 10 01:04:58.784326 systemd[1]: Stopped target remote-fs.target. Jul 10 01:04:58.784574 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 01:04:58.784882 systemd[1]: Stopped target sysinit.target. Jul 10 01:04:58.785175 systemd[1]: Stopped target local-fs.target. Jul 10 01:04:58.785435 systemd[1]: Stopped target local-fs-pre.target. Jul 10 01:04:58.785687 systemd[1]: Stopped target swap.target. Jul 10 01:04:58.785956 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 01:04:58.786191 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 01:04:58.785000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.786560 systemd[1]: Stopped target cryptsetup.target. Jul 10 01:04:58.786809 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 01:04:58.787049 systemd[1]: Stopped dracut-initqueue.service. Jul 10 01:04:58.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.787387 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 01:04:58.787592 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 01:04:58.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.787952 systemd[1]: Stopped target paths.target. Jul 10 01:04:58.788197 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 01:04:58.792248 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 01:04:58.792542 systemd[1]: Stopped target slices.target. Jul 10 01:04:58.792793 systemd[1]: Stopped target sockets.target. Jul 10 01:04:58.793046 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 01:04:58.793230 systemd[1]: Closed iscsid.socket. Jul 10 01:04:58.793465 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 01:04:58.793638 systemd[1]: Closed iscsiuio.socket. Jul 10 01:04:58.793884 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 01:04:58.794097 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 01:04:58.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.794434 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 01:04:58.794775 systemd[1]: Stopped ignition-files.service. Jul 10 01:04:58.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.795586 systemd[1]: Stopping ignition-mount.service... Jul 10 01:04:58.796293 systemd[1]: Stopping sysroot-boot.service... Jul 10 01:04:58.796516 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 01:04:58.796722 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 01:04:58.797011 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 01:04:58.797207 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 01:04:58.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.796000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.800658 ignition[907]: INFO : Ignition 2.14.0 Jul 10 01:04:58.800658 ignition[907]: INFO : Stage: umount Jul 10 01:04:58.800658 ignition[907]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 10 01:04:58.800658 ignition[907]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 10 01:04:58.801554 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 01:04:58.801750 systemd[1]: Finished initrd-cleanup.service. Jul 10 01:04:58.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.800000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.802868 ignition[907]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 10 01:04:58.804340 ignition[907]: INFO : umount: umount passed Jul 10 01:04:58.804490 ignition[907]: INFO : Ignition finished successfully Jul 10 01:04:58.805424 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 01:04:58.805609 systemd[1]: Stopped ignition-mount.service. Jul 10 01:04:58.804000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.805894 systemd[1]: Stopped target network.target. Jul 10 01:04:58.806092 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 01:04:58.806279 systemd[1]: Stopped ignition-disks.service. Jul 10 01:04:58.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.806536 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 01:04:58.806683 systemd[1]: Stopped ignition-kargs.service. Jul 10 01:04:58.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.806932 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 01:04:58.807079 systemd[1]: Stopped ignition-setup.service. Jul 10 01:04:58.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.807401 systemd[1]: Stopping systemd-networkd.service... Jul 10 01:04:58.807659 systemd[1]: Stopping systemd-resolved.service... Jul 10 01:04:58.810767 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 01:04:58.810956 systemd[1]: Stopped systemd-networkd.service. Jul 10 01:04:58.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.811535 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 01:04:58.811687 systemd[1]: Closed systemd-networkd.socket. Jul 10 01:04:58.812283 systemd[1]: Stopping network-cleanup.service... Jul 10 01:04:58.812559 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 01:04:58.812720 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 01:04:58.812962 systemd[1]: afterburn-network-kargs.service: Deactivated successfully. Jul 10 01:04:58.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.813164 systemd[1]: Stopped afterburn-network-kargs.service. Jul 10 01:04:58.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.813500 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 01:04:58.813649 systemd[1]: Stopped systemd-sysctl.service. Jul 10 01:04:58.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.813941 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 01:04:58.814097 systemd[1]: Stopped systemd-modules-load.service. Jul 10 01:04:58.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.814406 systemd[1]: Stopping systemd-udevd.service... Jul 10 01:04:58.815587 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 01:04:58.814000 audit: BPF prog-id=9 op=UNLOAD Jul 10 01:04:58.817469 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 01:04:58.817673 systemd[1]: Stopped systemd-resolved.service. Jul 10 01:04:58.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.819686 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 01:04:58.819869 systemd[1]: Stopped network-cleanup.service. Jul 10 01:04:58.818000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.820971 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 01:04:58.821185 systemd[1]: Stopped systemd-udevd.service. Jul 10 01:04:58.820000 audit: BPF prog-id=6 op=UNLOAD Jul 10 01:04:58.823874 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 01:04:58.824043 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 01:04:58.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.824067 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 01:04:58.824171 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 01:04:58.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.824188 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 01:04:58.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.824539 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 01:04:58.824562 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 01:04:58.825315 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 01:04:58.825336 systemd[1]: Stopped dracut-cmdline.service. Jul 10 01:04:58.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.825499 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 01:04:58.825526 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 01:04:58.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.826027 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 01:04:58.827456 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 10 01:04:58.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.827493 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 10 01:04:58.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.827808 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 01:04:58.827831 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 01:04:58.828027 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 01:04:58.828047 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 01:04:58.828848 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 10 01:04:58.832748 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 01:04:58.832999 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 01:04:58.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.832000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.883683 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 01:04:58.883748 systemd[1]: Stopped sysroot-boot.service. Jul 10 01:04:58.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.884081 systemd[1]: Reached target initrd-switch-root.target. Jul 10 01:04:58.884209 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 01:04:58.883000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:58.884249 systemd[1]: Stopped initrd-setup-root.service. Jul 10 01:04:58.884877 systemd[1]: Starting initrd-switch-root.service... Jul 10 01:04:58.892595 systemd[1]: Switching root. Jul 10 01:04:58.913697 iscsid[740]: iscsid shutting down. Jul 10 01:04:58.913866 systemd-journald[217]: Journal stopped Jul 10 01:05:01.981692 systemd-journald[217]: Received SIGTERM from PID 1 (n/a). Jul 10 01:05:01.981712 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 01:05:01.981720 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 01:05:01.981726 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 01:05:01.981731 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 01:05:01.981738 kernel: SELinux: policy capability open_perms=1 Jul 10 01:05:01.981744 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 01:05:01.981750 kernel: SELinux: policy capability always_check_network=0 Jul 10 01:05:01.981756 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 01:05:01.981762 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 01:05:01.981767 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 01:05:01.981772 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 01:05:01.981780 systemd[1]: Successfully loaded SELinux policy in 141.306ms. Jul 10 01:05:01.981787 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.844ms. Jul 10 01:05:01.981795 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 01:05:01.981802 systemd[1]: Detected virtualization vmware. Jul 10 01:05:01.981809 systemd[1]: Detected architecture x86-64. Jul 10 01:05:01.981815 systemd[1]: Detected first boot. Jul 10 01:05:01.981822 systemd[1]: Initializing machine ID from random generator. Jul 10 01:05:01.981828 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 01:05:01.981834 systemd[1]: Populated /etc with preset unit settings. Jul 10 01:05:01.981841 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 01:05:01.981848 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 01:05:01.981855 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 01:05:01.981863 kernel: kauditd_printk_skb: 51 callbacks suppressed Jul 10 01:05:01.981868 kernel: audit: type=1334 audit(1752109501.866:85): prog-id=12 op=LOAD Jul 10 01:05:01.981875 kernel: audit: type=1334 audit(1752109501.866:86): prog-id=3 op=UNLOAD Jul 10 01:05:01.981880 kernel: audit: type=1334 audit(1752109501.866:87): prog-id=13 op=LOAD Jul 10 01:05:01.981886 kernel: audit: type=1334 audit(1752109501.866:88): prog-id=14 op=LOAD Jul 10 01:05:01.981892 kernel: audit: type=1334 audit(1752109501.866:89): prog-id=4 op=UNLOAD Jul 10 01:05:01.981898 kernel: audit: type=1334 audit(1752109501.866:90): prog-id=5 op=UNLOAD Jul 10 01:05:01.981905 kernel: audit: type=1334 audit(1752109501.868:91): prog-id=15 op=LOAD Jul 10 01:05:01.981912 kernel: audit: type=1334 audit(1752109501.868:92): prog-id=12 op=UNLOAD Jul 10 01:05:01.981918 kernel: audit: type=1334 audit(1752109501.870:93): prog-id=16 op=LOAD Jul 10 01:05:01.981923 kernel: audit: type=1334 audit(1752109501.871:94): prog-id=17 op=LOAD Jul 10 01:05:01.981929 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 01:05:01.981936 systemd[1]: Stopped iscsiuio.service. Jul 10 01:05:01.981943 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 01:05:01.981952 systemd[1]: Stopped iscsid.service. Jul 10 01:05:01.981960 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 01:05:01.981968 systemd[1]: Stopped initrd-switch-root.service. Jul 10 01:05:01.981975 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 01:05:01.981982 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 01:05:01.981989 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 01:05:01.981998 systemd[1]: Created slice system-getty.slice. Jul 10 01:05:01.982007 systemd[1]: Created slice system-modprobe.slice. Jul 10 01:05:01.982014 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 01:05:01.982021 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 01:05:01.982029 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 01:05:01.982036 systemd[1]: Created slice user.slice. Jul 10 01:05:01.982042 systemd[1]: Started systemd-ask-password-console.path. Jul 10 01:05:01.982049 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 01:05:01.982056 systemd[1]: Set up automount boot.automount. Jul 10 01:05:01.982062 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 01:05:01.982069 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 01:05:01.982077 systemd[1]: Stopped target initrd-fs.target. Jul 10 01:05:01.982085 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 01:05:01.982091 systemd[1]: Reached target integritysetup.target. Jul 10 01:05:01.982098 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 01:05:01.982105 systemd[1]: Reached target remote-fs.target. Jul 10 01:05:01.982111 systemd[1]: Reached target slices.target. Jul 10 01:05:01.982118 systemd[1]: Reached target swap.target. Jul 10 01:05:01.982124 systemd[1]: Reached target torcx.target. Jul 10 01:05:01.982131 systemd[1]: Reached target veritysetup.target. Jul 10 01:05:01.982139 systemd[1]: Listening on systemd-coredump.socket. Jul 10 01:05:01.982146 systemd[1]: Listening on systemd-initctl.socket. Jul 10 01:05:01.982153 systemd[1]: Listening on systemd-networkd.socket. Jul 10 01:05:01.982160 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 01:05:01.982167 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 01:05:01.982175 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 01:05:01.982182 systemd[1]: Mounting dev-hugepages.mount... Jul 10 01:05:01.982189 systemd[1]: Mounting dev-mqueue.mount... Jul 10 01:05:01.982196 systemd[1]: Mounting media.mount... Jul 10 01:05:01.982203 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:05:01.982210 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 01:05:01.982216 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 01:05:01.982235 systemd[1]: Mounting tmp.mount... Jul 10 01:05:01.982244 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 01:05:01.982253 systemd[1]: Starting ignition-delete-config.service... Jul 10 01:05:01.982260 systemd[1]: Starting kmod-static-nodes.service... Jul 10 01:05:01.982267 systemd[1]: Starting modprobe@configfs.service... Jul 10 01:05:01.982273 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 01:05:01.982280 systemd[1]: Starting modprobe@drm.service... Jul 10 01:05:01.982287 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 01:05:01.982294 systemd[1]: Starting modprobe@fuse.service... Jul 10 01:05:01.982301 systemd[1]: Starting modprobe@loop.service... Jul 10 01:05:01.982309 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 01:05:01.982317 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 01:05:01.982324 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 01:05:01.982331 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 01:05:01.982339 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 01:05:01.982346 systemd[1]: Stopped systemd-journald.service. Jul 10 01:05:01.982352 systemd[1]: Starting systemd-journald.service... Jul 10 01:05:01.982359 systemd[1]: Starting systemd-modules-load.service... Jul 10 01:05:01.982366 systemd[1]: Starting systemd-network-generator.service... Jul 10 01:05:01.982374 systemd[1]: Starting systemd-remount-fs.service... Jul 10 01:05:01.982381 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 01:05:01.982388 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 01:05:01.982395 systemd[1]: Stopped verity-setup.service. Jul 10 01:05:01.982402 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:05:01.982409 systemd[1]: Mounted dev-hugepages.mount. Jul 10 01:05:01.982416 systemd[1]: Mounted dev-mqueue.mount. Jul 10 01:05:01.982423 systemd[1]: Mounted media.mount. Jul 10 01:05:01.982430 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 01:05:01.982443 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 01:05:01.982454 systemd[1]: Mounted tmp.mount. Jul 10 01:05:01.982462 systemd[1]: Finished kmod-static-nodes.service. Jul 10 01:05:01.982469 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 01:05:01.982475 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 01:05:01.982483 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 01:05:01.982490 systemd[1]: Finished modprobe@drm.service. Jul 10 01:05:01.982499 systemd-journald[1021]: Journal started Jul 10 01:05:01.982531 systemd-journald[1021]: Runtime Journal (/run/log/journal/8492992ad26c49608eefa6cde712458c) is 4.8M, max 38.8M, 34.0M free. Jul 10 01:04:59.343000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 01:04:59.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 01:04:59.432000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 01:04:59.432000 audit: BPF prog-id=10 op=LOAD Jul 10 01:04:59.432000 audit: BPF prog-id=10 op=UNLOAD Jul 10 01:04:59.432000 audit: BPF prog-id=11 op=LOAD Jul 10 01:04:59.432000 audit: BPF prog-id=11 op=UNLOAD Jul 10 01:04:59.606000 audit[941]: AVC avc: denied { associate } for pid=941 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 01:04:59.606000 audit[941]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d89c a1=c0000cede0 a2=c0000d70c0 a3=32 items=0 ppid=924 pid=941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:04:59.606000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 01:04:59.607000 audit[941]: AVC avc: denied { associate } for pid=941 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 01:04:59.607000 audit[941]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d975 a2=1ed a3=0 items=2 ppid=924 pid=941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:04:59.607000 audit: CWD cwd="/" Jul 10 01:04:59.607000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:04:59.607000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:04:59.607000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 01:05:01.866000 audit: BPF prog-id=12 op=LOAD Jul 10 01:05:01.866000 audit: BPF prog-id=3 op=UNLOAD Jul 10 01:05:01.866000 audit: BPF prog-id=13 op=LOAD Jul 10 01:05:01.866000 audit: BPF prog-id=14 op=LOAD Jul 10 01:05:01.866000 audit: BPF prog-id=4 op=UNLOAD Jul 10 01:05:01.866000 audit: BPF prog-id=5 op=UNLOAD Jul 10 01:05:01.868000 audit: BPF prog-id=15 op=LOAD Jul 10 01:05:01.868000 audit: BPF prog-id=12 op=UNLOAD Jul 10 01:05:01.870000 audit: BPF prog-id=16 op=LOAD Jul 10 01:05:01.871000 audit: BPF prog-id=17 op=LOAD Jul 10 01:05:01.871000 audit: BPF prog-id=13 op=UNLOAD Jul 10 01:05:01.871000 audit: BPF prog-id=14 op=UNLOAD Jul 10 01:05:01.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.884000 audit: BPF prog-id=15 op=UNLOAD Jul 10 01:05:01.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.945000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.946000 audit: BPF prog-id=18 op=LOAD Jul 10 01:05:01.946000 audit: BPF prog-id=19 op=LOAD Jul 10 01:05:01.946000 audit: BPF prog-id=20 op=LOAD Jul 10 01:05:01.946000 audit: BPF prog-id=16 op=UNLOAD Jul 10 01:05:01.946000 audit: BPF prog-id=17 op=UNLOAD Jul 10 01:05:01.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.978000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 01:05:01.988572 systemd[1]: Started systemd-journald.service. Jul 10 01:05:01.978000 audit[1021]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=6 a1=7ffcad069e60 a2=4000 a3=7ffcad069efc items=0 ppid=1 pid=1021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:01.978000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 01:05:01.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.979000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.982000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.984000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.985000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:01.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:04:59.603362 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 01:05:01.866035 systemd[1]: Queued start job for default target multi-user.target. Jul 10 01:04:59.604950 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 01:05:01.866043 systemd[1]: Unnecessary job was removed for dev-sda6.device. Jul 10 01:04:59.604967 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 01:05:01.873664 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 01:04:59.604989 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 01:05:01.986324 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 01:04:59.604999 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 01:05:01.986430 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 01:04:59.605021 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 01:05:01.986734 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 01:04:59.605028 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 01:05:01.986824 systemd[1]: Finished modprobe@configfs.service. Jul 10 01:04:59.605161 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 01:05:01.987087 systemd[1]: Finished systemd-modules-load.service. Jul 10 01:04:59.605185 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 01:05:01.987359 systemd[1]: Finished systemd-network-generator.service. Jul 10 01:05:01.989597 jq[1008]: true Jul 10 01:04:59.605192 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 01:05:01.987588 systemd[1]: Finished systemd-remount-fs.service. Jul 10 01:04:59.606566 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 01:05:01.987824 systemd[1]: Reached target network-pre.target. Jul 10 01:04:59.606587 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 01:05:01.989625 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 01:04:59.606599 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 01:04:59.606608 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 01:04:59.606618 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 01:04:59.606625 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:04:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 01:05:01.522620 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:05:01Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 01:05:01.522793 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:05:01Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 01:05:01.522862 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:05:01Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 01:05:01.522967 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:05:01Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 01:05:01.523000 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:05:01Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 01:05:01.523043 /usr/lib/systemd/system-generators/torcx-generator[941]: time="2025-07-10T01:05:01Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 01:05:01.991181 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 01:05:01.994235 kernel: fuse: init (API version 7.34) Jul 10 01:05:01.997793 jq[1034]: true Jul 10 01:05:02.004615 kernel: loop: module loaded Jul 10 01:05:02.003321 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 01:05:02.004153 systemd[1]: Starting systemd-journal-flush.service... Jul 10 01:05:02.004288 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 01:05:02.005016 systemd[1]: Starting systemd-random-seed.service... Jul 10 01:05:02.005882 systemd[1]: Starting systemd-sysctl.service... Jul 10 01:05:02.007031 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 01:05:02.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.007125 systemd[1]: Finished modprobe@fuse.service. Jul 10 01:05:02.007378 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 01:05:02.007461 systemd[1]: Finished modprobe@loop.service. Jul 10 01:05:02.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.006000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.007959 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 01:05:02.009319 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 01:05:02.010979 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 01:05:02.013110 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 01:05:02.019590 systemd-journald[1021]: Time spent on flushing to /var/log/journal/8492992ad26c49608eefa6cde712458c is 42.475ms for 2016 entries. Jul 10 01:05:02.019590 systemd-journald[1021]: System Journal (/var/log/journal/8492992ad26c49608eefa6cde712458c) is 8.0M, max 584.8M, 576.8M free. Jul 10 01:05:02.116168 systemd-journald[1021]: Received client request to flush runtime journal. Jul 10 01:05:02.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.019528 systemd[1]: Finished systemd-random-seed.service. Jul 10 01:05:02.020664 systemd[1]: Reached target first-boot-complete.target. Jul 10 01:05:02.030276 systemd[1]: Finished systemd-sysctl.service. Jul 10 01:05:02.040377 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 01:05:02.041395 systemd[1]: Starting systemd-sysusers.service... Jul 10 01:05:02.106402 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 01:05:02.107376 systemd[1]: Starting systemd-udev-settle.service... Jul 10 01:05:02.118308 systemd[1]: Finished systemd-journal-flush.service. Jul 10 01:05:02.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.118620 udevadm[1067]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 10 01:05:02.416165 systemd[1]: Finished systemd-sysusers.service. Jul 10 01:05:02.415000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.417179 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 01:05:02.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.493818 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 01:05:02.544316 ignition[1059]: Ignition 2.14.0 Jul 10 01:05:02.544553 ignition[1059]: deleting config from guestinfo properties Jul 10 01:05:02.546769 ignition[1059]: Successfully deleted config Jul 10 01:05:02.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ignition-delete-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.547383 systemd[1]: Finished ignition-delete-config.service. Jul 10 01:05:02.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.704000 audit: BPF prog-id=21 op=LOAD Jul 10 01:05:02.705050 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 01:05:02.704000 audit: BPF prog-id=22 op=LOAD Jul 10 01:05:02.704000 audit: BPF prog-id=7 op=UNLOAD Jul 10 01:05:02.704000 audit: BPF prog-id=8 op=UNLOAD Jul 10 01:05:02.706158 systemd[1]: Starting systemd-udevd.service... Jul 10 01:05:02.719544 systemd-udevd[1075]: Using default interface naming scheme 'v252'. Jul 10 01:05:02.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:02.878000 audit: BPF prog-id=23 op=LOAD Jul 10 01:05:02.878955 systemd[1]: Started systemd-udevd.service. Jul 10 01:05:02.880289 systemd[1]: Starting systemd-networkd.service... Jul 10 01:05:02.895544 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 10 01:05:02.926261 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 10 01:05:02.931244 kernel: ACPI: button: Power Button [PWRF] Jul 10 01:05:02.944000 audit: BPF prog-id=24 op=LOAD Jul 10 01:05:02.944000 audit: BPF prog-id=25 op=LOAD Jul 10 01:05:02.944000 audit: BPF prog-id=26 op=LOAD Jul 10 01:05:02.946076 systemd[1]: Starting systemd-userdbd.service... Jul 10 01:05:02.987655 systemd[1]: Started systemd-userdbd.service. Jul 10 01:05:02.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:03.007000 audit[1084]: AVC avc: denied { confidentiality } for pid=1084 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 10 01:05:03.007000 audit[1084]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=5647ddc49240 a1=338ac a2=7fe45497fbc5 a3=5 items=110 ppid=1075 pid=1084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:03.007000 audit: CWD cwd="/" Jul 10 01:05:03.007000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=1 name=(null) inode=25106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=2 name=(null) inode=25106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=3 name=(null) inode=25107 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=4 name=(null) inode=25106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=5 name=(null) inode=25108 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=6 name=(null) inode=25106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=7 name=(null) inode=25109 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=8 name=(null) inode=25109 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=9 name=(null) inode=25110 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=10 name=(null) inode=25109 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=11 name=(null) inode=25111 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=12 name=(null) inode=25109 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=13 name=(null) inode=25112 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=14 name=(null) inode=25109 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=15 name=(null) inode=25113 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=16 name=(null) inode=25109 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=17 name=(null) inode=25114 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=18 name=(null) inode=25106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=19 name=(null) inode=25115 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=20 name=(null) inode=25115 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=21 name=(null) inode=25116 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=22 name=(null) inode=25115 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=23 name=(null) inode=25117 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=24 name=(null) inode=25115 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=25 name=(null) inode=25118 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=26 name=(null) inode=25115 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=27 name=(null) inode=25119 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=28 name=(null) inode=25115 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=29 name=(null) inode=25120 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=30 name=(null) inode=25106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=31 name=(null) inode=25121 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=32 name=(null) inode=25121 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=33 name=(null) inode=25122 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=34 name=(null) inode=25121 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=35 name=(null) inode=25123 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=36 name=(null) inode=25121 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=37 name=(null) inode=25124 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=38 name=(null) inode=25121 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=39 name=(null) inode=25125 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=40 name=(null) inode=25121 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=41 name=(null) inode=25126 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=42 name=(null) inode=25106 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=43 name=(null) inode=25127 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=44 name=(null) inode=25127 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=45 name=(null) inode=25128 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=46 name=(null) inode=25127 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=47 name=(null) inode=25129 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=48 name=(null) inode=25127 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=49 name=(null) inode=25130 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=50 name=(null) inode=25127 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=51 name=(null) inode=25131 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=52 name=(null) inode=25127 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=53 name=(null) inode=25132 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=55 name=(null) inode=25133 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=56 name=(null) inode=25133 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=57 name=(null) inode=25134 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=58 name=(null) inode=25133 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=59 name=(null) inode=25135 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=60 name=(null) inode=25133 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=61 name=(null) inode=25136 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=62 name=(null) inode=25136 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=63 name=(null) inode=25137 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=64 name=(null) inode=25136 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=65 name=(null) inode=25138 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=66 name=(null) inode=25136 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=67 name=(null) inode=25139 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=68 name=(null) inode=25136 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=69 name=(null) inode=25140 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=70 name=(null) inode=25136 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=71 name=(null) inode=25141 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=72 name=(null) inode=25133 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=73 name=(null) inode=25142 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=74 name=(null) inode=25142 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=75 name=(null) inode=25143 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=76 name=(null) inode=25142 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=77 name=(null) inode=25144 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=78 name=(null) inode=25142 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=79 name=(null) inode=25145 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=80 name=(null) inode=25142 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=81 name=(null) inode=25146 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=82 name=(null) inode=25142 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=83 name=(null) inode=25147 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=84 name=(null) inode=25133 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=85 name=(null) inode=25148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=86 name=(null) inode=25148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=87 name=(null) inode=25149 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=88 name=(null) inode=25148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=89 name=(null) inode=25150 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=90 name=(null) inode=25148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=91 name=(null) inode=25151 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=92 name=(null) inode=25148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=93 name=(null) inode=25152 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=94 name=(null) inode=25148 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=95 name=(null) inode=25153 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=96 name=(null) inode=25133 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=97 name=(null) inode=25154 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=98 name=(null) inode=25154 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=99 name=(null) inode=25155 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=100 name=(null) inode=25154 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=101 name=(null) inode=25156 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=102 name=(null) inode=25154 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=103 name=(null) inode=25157 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=104 name=(null) inode=25154 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=105 name=(null) inode=25158 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=106 name=(null) inode=25154 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=107 name=(null) inode=25159 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PATH item=109 name=(null) inode=25160 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:05:03.007000 audit: PROCTITLE proctitle="(udev-worker)" Jul 10 01:05:03.034342 kernel: vmw_vmci 0000:00:07.7: Found VMCI PCI device at 0x11080, irq 16 Jul 10 01:05:03.035108 kernel: vmw_vmci 0000:00:07.7: Using capabilities 0xc Jul 10 01:05:03.035192 kernel: Guest personality initialized and is active Jul 10 01:05:03.036495 kernel: VMCI host device registered (name=vmci, major=10, minor=125) Jul 10 01:05:03.036525 kernel: Initialized host personality Jul 10 01:05:03.043584 kernel: piix4_smbus 0000:00:07.3: SMBus Host Controller not enabled! Jul 10 01:05:03.044919 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input3 Jul 10 01:05:03.057799 (udev-worker)[1086]: id: Truncating stdout of 'dmi_memory_id' up to 16384 byte. Jul 10 01:05:03.067258 kernel: mousedev: PS/2 mouse device common for all mice Jul 10 01:05:03.114381 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 01:05:03.143442 systemd[1]: Finished systemd-udev-settle.service. Jul 10 01:05:03.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:03.144391 systemd[1]: Starting lvm2-activation-early.service... Jul 10 01:05:03.223558 systemd-networkd[1083]: lo: Link UP Jul 10 01:05:03.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:03.223564 systemd-networkd[1083]: lo: Gained carrier Jul 10 01:05:03.223873 systemd-networkd[1083]: Enumeration completed Jul 10 01:05:03.223939 systemd[1]: Started systemd-networkd.service. Jul 10 01:05:03.223942 systemd-networkd[1083]: ens192: Configuring with /etc/systemd/network/00-vmware.network. Jul 10 01:05:03.314274 lvm[1108]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 01:05:03.316534 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 10 01:05:03.316691 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 10 01:05:03.316800 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): ens192: link becomes ready Jul 10 01:05:03.316649 systemd-networkd[1083]: ens192: Link UP Jul 10 01:05:03.316821 systemd-networkd[1083]: ens192: Gained carrier Jul 10 01:05:03.350000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:03.351953 systemd[1]: Finished lvm2-activation-early.service. Jul 10 01:05:03.352180 systemd[1]: Reached target cryptsetup.target. Jul 10 01:05:03.353324 systemd[1]: Starting lvm2-activation.service... Jul 10 01:05:03.356811 lvm[1109]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 01:05:03.391916 systemd[1]: Finished lvm2-activation.service. Jul 10 01:05:03.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:03.392124 systemd[1]: Reached target local-fs-pre.target. Jul 10 01:05:03.392256 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 01:05:03.392281 systemd[1]: Reached target local-fs.target. Jul 10 01:05:03.392397 systemd[1]: Reached target machines.target. Jul 10 01:05:03.393496 systemd[1]: Starting ldconfig.service... Jul 10 01:05:03.401600 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 01:05:03.401635 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:05:03.402526 systemd[1]: Starting systemd-boot-update.service... Jul 10 01:05:03.403326 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 01:05:03.404317 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 01:05:03.405388 systemd[1]: Starting systemd-sysext.service... Jul 10 01:05:03.427012 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1111 (bootctl) Jul 10 01:05:03.427978 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 01:05:03.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:03.440803 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 01:05:03.448052 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 01:05:03.462348 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 01:05:03.462456 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 01:05:03.482238 kernel: loop0: detected capacity change from 0 to 229808 Jul 10 01:05:04.007870 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 01:05:04.008418 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 01:05:04.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.044276 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 01:05:04.065088 systemd-fsck[1121]: fsck.fat 4.2 (2021-01-31) Jul 10 01:05:04.065088 systemd-fsck[1121]: /dev/sda1: 790 files, 120731/258078 clusters Jul 10 01:05:04.066073 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 01:05:04.065000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.067454 systemd[1]: Mounting boot.mount... Jul 10 01:05:04.082571 systemd[1]: Mounted boot.mount. Jul 10 01:05:04.089243 kernel: loop1: detected capacity change from 0 to 229808 Jul 10 01:05:04.125878 systemd[1]: Finished systemd-boot-update.service. Jul 10 01:05:04.124000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.141925 (sd-sysext)[1125]: Using extensions 'kubernetes'. Jul 10 01:05:04.143021 (sd-sysext)[1125]: Merged extensions into '/usr'. Jul 10 01:05:04.165057 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:05:04.166402 systemd[1]: Mounting usr-share-oem.mount... Jul 10 01:05:04.167435 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 01:05:04.169690 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 01:05:04.170688 systemd[1]: Starting modprobe@loop.service... Jul 10 01:05:04.171326 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 01:05:04.171427 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:05:04.171533 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:05:04.173982 systemd[1]: Mounted usr-share-oem.mount. Jul 10 01:05:04.174366 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 01:05:04.174473 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 01:05:04.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.174900 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 01:05:04.174997 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 01:05:04.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.175427 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 01:05:04.175523 systemd[1]: Finished modprobe@loop.service. Jul 10 01:05:04.174000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.174000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.175983 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 01:05:04.176079 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 01:05:04.176874 systemd[1]: Finished systemd-sysext.service. Jul 10 01:05:04.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.178193 systemd[1]: Starting ensure-sysext.service... Jul 10 01:05:04.179316 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 01:05:04.185139 systemd[1]: Reloading. Jul 10 01:05:04.187464 systemd-tmpfiles[1133]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 01:05:04.189689 systemd-tmpfiles[1133]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 01:05:04.191492 systemd-tmpfiles[1133]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 01:05:04.239883 /usr/lib/systemd/system-generators/torcx-generator[1152]: time="2025-07-10T01:05:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 01:05:04.239900 /usr/lib/systemd/system-generators/torcx-generator[1152]: time="2025-07-10T01:05:04Z" level=info msg="torcx already run" Jul 10 01:05:04.302124 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 01:05:04.302276 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 01:05:04.318363 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 01:05:04.354000 audit: BPF prog-id=27 op=LOAD Jul 10 01:05:04.354000 audit: BPF prog-id=23 op=UNLOAD Jul 10 01:05:04.354000 audit: BPF prog-id=28 op=LOAD Jul 10 01:05:04.355000 audit: BPF prog-id=29 op=LOAD Jul 10 01:05:04.355000 audit: BPF prog-id=21 op=UNLOAD Jul 10 01:05:04.355000 audit: BPF prog-id=22 op=UNLOAD Jul 10 01:05:04.355000 audit: BPF prog-id=30 op=LOAD Jul 10 01:05:04.355000 audit: BPF prog-id=24 op=UNLOAD Jul 10 01:05:04.355000 audit: BPF prog-id=31 op=LOAD Jul 10 01:05:04.355000 audit: BPF prog-id=32 op=LOAD Jul 10 01:05:04.355000 audit: BPF prog-id=25 op=UNLOAD Jul 10 01:05:04.355000 audit: BPF prog-id=26 op=UNLOAD Jul 10 01:05:04.357000 audit: BPF prog-id=33 op=LOAD Jul 10 01:05:04.357000 audit: BPF prog-id=18 op=UNLOAD Jul 10 01:05:04.357000 audit: BPF prog-id=34 op=LOAD Jul 10 01:05:04.357000 audit: BPF prog-id=35 op=LOAD Jul 10 01:05:04.357000 audit: BPF prog-id=19 op=UNLOAD Jul 10 01:05:04.357000 audit: BPF prog-id=20 op=UNLOAD Jul 10 01:05:04.365173 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 01:05:04.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.375175 systemd[1]: Finished ensure-sysext.service. Jul 10 01:05:04.374000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.375842 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:05:04.376744 systemd[1]: Starting audit-rules.service... Jul 10 01:05:04.377770 systemd[1]: Starting clean-ca-certificates.service... Jul 10 01:05:04.378581 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 01:05:04.379401 systemd[1]: Starting modprobe@drm.service... Jul 10 01:05:04.380446 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 01:05:04.381261 systemd[1]: Starting modprobe@loop.service... Jul 10 01:05:04.382381 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 01:05:04.382410 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:05:04.383186 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 01:05:04.384000 audit: BPF prog-id=36 op=LOAD Jul 10 01:05:04.385000 audit: BPF prog-id=37 op=LOAD Jul 10 01:05:04.385038 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 01:05:04.386384 systemd[1]: Starting systemd-resolved.service... Jul 10 01:05:04.388138 systemd[1]: Starting systemd-timesyncd.service... Jul 10 01:05:04.389178 systemd[1]: Starting systemd-update-utmp.service... Jul 10 01:05:04.389341 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 10 01:05:04.389819 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 01:05:04.388000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.388000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.389914 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 01:05:04.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.389000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.390241 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 01:05:04.390320 systemd[1]: Finished modprobe@drm.service. Jul 10 01:05:04.390548 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 01:05:04.390611 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 01:05:04.390830 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 01:05:04.390895 systemd[1]: Finished modprobe@loop.service. Jul 10 01:05:04.391562 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 01:05:04.391593 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 01:05:04.394000 audit[1224]: SYSTEM_BOOT pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.397418 systemd[1]: Finished clean-ca-certificates.service. Jul 10 01:05:04.396000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.397784 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 01:05:04.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.402048 systemd[1]: Finished systemd-update-utmp.service. Jul 10 01:05:04.471758 systemd[1]: Started systemd-timesyncd.service. Jul 10 01:05:04.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.471953 systemd[1]: Reached target time-set.target. Jul 10 01:05:04.480862 systemd-resolved[1222]: Positive Trust Anchors: Jul 10 01:05:04.480872 systemd-resolved[1222]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 01:05:04.480895 systemd-resolved[1222]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 01:05:04.491159 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 01:05:04.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:05:04.539474 augenrules[1239]: No rules Jul 10 01:05:04.538000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 01:05:04.538000 audit[1239]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffdfebaa660 a2=420 a3=0 items=0 ppid=1213 pid=1239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:05:04.538000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 01:05:04.539841 systemd[1]: Finished audit-rules.service. Jul 10 01:06:31.180137 systemd-timesyncd[1223]: Contacted time server 97.107.136.23:123 (0.flatcar.pool.ntp.org). Jul 10 01:06:31.180334 systemd-timesyncd[1223]: Initial clock synchronization to Thu 2025-07-10 01:06:31.180069 UTC. Jul 10 01:06:31.259243 systemd-resolved[1222]: Defaulting to hostname 'linux'. Jul 10 01:06:31.260405 systemd[1]: Started systemd-resolved.service. Jul 10 01:06:31.260557 systemd[1]: Reached target network.target. Jul 10 01:06:31.260645 systemd[1]: Reached target nss-lookup.target. Jul 10 01:06:31.886525 systemd-networkd[1083]: ens192: Gained IPv6LL Jul 10 01:06:31.887614 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 01:06:31.887831 systemd[1]: Reached target network-online.target. Jul 10 01:06:32.259840 ldconfig[1110]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 01:06:32.262524 systemd[1]: Finished ldconfig.service. Jul 10 01:06:32.263586 systemd[1]: Starting systemd-update-done.service... Jul 10 01:06:32.268977 systemd[1]: Finished systemd-update-done.service. Jul 10 01:06:32.269140 systemd[1]: Reached target sysinit.target. Jul 10 01:06:32.269317 systemd[1]: Started motdgen.path. Jul 10 01:06:32.269421 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 01:06:32.269607 systemd[1]: Started logrotate.timer. Jul 10 01:06:32.269737 systemd[1]: Started mdadm.timer. Jul 10 01:06:32.269817 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 01:06:32.269908 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 01:06:32.269928 systemd[1]: Reached target paths.target. Jul 10 01:06:32.270008 systemd[1]: Reached target timers.target. Jul 10 01:06:32.270254 systemd[1]: Listening on dbus.socket. Jul 10 01:06:32.271079 systemd[1]: Starting docker.socket... Jul 10 01:06:32.273865 systemd[1]: Listening on sshd.socket. Jul 10 01:06:32.274029 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:06:32.274272 systemd[1]: Listening on docker.socket. Jul 10 01:06:32.274413 systemd[1]: Reached target sockets.target. Jul 10 01:06:32.274501 systemd[1]: Reached target basic.target. Jul 10 01:06:32.274611 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 01:06:32.274630 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 01:06:32.275511 systemd[1]: Starting containerd.service... Jul 10 01:06:32.276261 systemd[1]: Starting dbus.service... Jul 10 01:06:32.277557 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 01:06:32.278471 systemd[1]: Starting extend-filesystems.service... Jul 10 01:06:32.279395 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 01:06:32.280291 jq[1249]: false Jul 10 01:06:32.281780 systemd[1]: Starting kubelet.service... Jul 10 01:06:32.282609 systemd[1]: Starting motdgen.service... Jul 10 01:06:32.283705 systemd[1]: Starting prepare-helm.service... Jul 10 01:06:32.284487 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 01:06:32.285344 systemd[1]: Starting sshd-keygen.service... Jul 10 01:06:32.287162 systemd[1]: Starting systemd-logind.service... Jul 10 01:06:32.287280 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 01:06:32.287321 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 01:06:32.287916 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 01:06:32.288261 systemd[1]: Starting update-engine.service... Jul 10 01:06:32.289490 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 01:06:32.295136 jq[1258]: true Jul 10 01:06:32.299474 systemd[1]: Starting vmtoolsd.service... Jul 10 01:06:32.301291 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 01:06:32.301474 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 01:06:32.302610 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 01:06:32.302762 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 01:06:32.310323 jq[1270]: true Jul 10 01:06:32.310503 systemd[1]: Started vmtoolsd.service. Jul 10 01:06:32.317359 tar[1269]: linux-amd64/LICENSE Jul 10 01:06:32.317359 tar[1269]: linux-amd64/helm Jul 10 01:06:32.339561 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 01:06:32.339675 systemd[1]: Finished motdgen.service. Jul 10 01:06:32.348538 dbus-daemon[1248]: [system] SELinux support is enabled Jul 10 01:06:32.348862 systemd[1]: Started dbus.service. Jul 10 01:06:32.350382 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 01:06:32.350406 systemd[1]: Reached target system-config.target. Jul 10 01:06:32.350525 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 01:06:32.350537 systemd[1]: Reached target user-config.target. Jul 10 01:06:32.366094 extend-filesystems[1250]: Found loop1 Jul 10 01:06:32.366935 extend-filesystems[1250]: Found sda Jul 10 01:06:32.366935 extend-filesystems[1250]: Found sda1 Jul 10 01:06:32.366935 extend-filesystems[1250]: Found sda2 Jul 10 01:06:32.366935 extend-filesystems[1250]: Found sda3 Jul 10 01:06:32.366935 extend-filesystems[1250]: Found usr Jul 10 01:06:32.366935 extend-filesystems[1250]: Found sda4 Jul 10 01:06:32.366935 extend-filesystems[1250]: Found sda6 Jul 10 01:06:32.366935 extend-filesystems[1250]: Found sda7 Jul 10 01:06:32.366935 extend-filesystems[1250]: Found sda9 Jul 10 01:06:32.366935 extend-filesystems[1250]: Checking size of /dev/sda9 Jul 10 01:06:32.370255 bash[1298]: Updated "/home/core/.ssh/authorized_keys" Jul 10 01:06:32.371687 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 01:06:32.387350 kernel: NET: Registered PF_VSOCK protocol family Jul 10 01:06:32.393024 extend-filesystems[1250]: Old size kept for /dev/sda9 Jul 10 01:06:32.393211 extend-filesystems[1250]: Found sr0 Jul 10 01:06:32.393394 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 01:06:32.393500 systemd[1]: Finished extend-filesystems.service. Jul 10 01:06:32.410517 env[1271]: time="2025-07-10T01:06:32.410476797Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 01:06:32.440480 systemd-logind[1256]: Watching system buttons on /dev/input/event1 (Power Button) Jul 10 01:06:32.440494 systemd-logind[1256]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 10 01:06:32.440619 systemd-logind[1256]: New seat seat0. Jul 10 01:06:32.442162 systemd[1]: Started systemd-logind.service. Jul 10 01:06:32.478958 env[1271]: time="2025-07-10T01:06:32.478804360Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 01:06:32.478958 env[1271]: time="2025-07-10T01:06:32.478899356Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480325397Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480350625Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480473306Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480483478Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480491168Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480496570Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480540752Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480676728Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480742435Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 01:06:32.480798 env[1271]: time="2025-07-10T01:06:32.480751491Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 01:06:32.480975 env[1271]: time="2025-07-10T01:06:32.480777316Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 01:06:32.480975 env[1271]: time="2025-07-10T01:06:32.480785389Z" level=info msg="metadata content store policy set" policy=shared Jul 10 01:06:32.482379 update_engine[1257]: I0710 01:06:32.477218 1257 main.cc:92] Flatcar Update Engine starting Jul 10 01:06:32.489060 systemd[1]: Started update-engine.service. Jul 10 01:06:32.490640 systemd[1]: Started locksmithd.service. Jul 10 01:06:32.491345 update_engine[1257]: I0710 01:06:32.491106 1257 update_check_scheduler.cc:74] Next update check in 10m26s Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.501968422Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.501995212Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502003053Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502049906Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502062159Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502087509Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502122051Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502136640Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502144813Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502152262Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502159848Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502167202Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502255296Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 01:06:32.503225 env[1271]: time="2025-07-10T01:06:32.502313827Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502493779Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502509918Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502517569Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502548683Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502590664Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502598018Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502604459Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502611472Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502618085Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502624756Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502642564Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502652202Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502734685Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502743867Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503594 env[1271]: time="2025-07-10T01:06:32.502750611Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503823 env[1271]: time="2025-07-10T01:06:32.502757437Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 01:06:32.503823 env[1271]: time="2025-07-10T01:06:32.502768759Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 01:06:32.503823 env[1271]: time="2025-07-10T01:06:32.502775232Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 01:06:32.503823 env[1271]: time="2025-07-10T01:06:32.502795297Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 01:06:32.503823 env[1271]: time="2025-07-10T01:06:32.502820189Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 01:06:32.503904 env[1271]: time="2025-07-10T01:06:32.502954341Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 01:06:32.503904 env[1271]: time="2025-07-10T01:06:32.502991492Z" level=info msg="Connect containerd service" Jul 10 01:06:32.503904 env[1271]: time="2025-07-10T01:06:32.503029243Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.504083956Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.504238273Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.504262145Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.504296986Z" level=info msg="containerd successfully booted in 0.099628s" Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.506099304Z" level=info msg="Start subscribing containerd event" Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.506127098Z" level=info msg="Start recovering state" Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.506267262Z" level=info msg="Start event monitor" Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.506285015Z" level=info msg="Start snapshots syncer" Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.506294539Z" level=info msg="Start cni network conf syncer for default" Jul 10 01:06:32.507787 env[1271]: time="2025-07-10T01:06:32.506299018Z" level=info msg="Start streaming server" Jul 10 01:06:32.504342 systemd[1]: Started containerd.service. Jul 10 01:06:32.747138 sshd_keygen[1284]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 01:06:32.763095 systemd[1]: Finished sshd-keygen.service. Jul 10 01:06:32.764305 systemd[1]: Starting issuegen.service... Jul 10 01:06:32.767883 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 01:06:32.767994 systemd[1]: Finished issuegen.service. Jul 10 01:06:32.769241 systemd[1]: Starting systemd-user-sessions.service... Jul 10 01:06:32.774062 systemd[1]: Finished systemd-user-sessions.service. Jul 10 01:06:32.775099 systemd[1]: Started getty@tty1.service. Jul 10 01:06:32.775950 systemd[1]: Started serial-getty@ttyS0.service. Jul 10 01:06:32.776147 systemd[1]: Reached target getty.target. Jul 10 01:06:32.877988 tar[1269]: linux-amd64/README.md Jul 10 01:06:32.880999 systemd[1]: Finished prepare-helm.service. Jul 10 01:06:32.943098 locksmithd[1325]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 01:06:34.436127 systemd[1]: Started kubelet.service. Jul 10 01:06:34.436455 systemd[1]: Reached target multi-user.target. Jul 10 01:06:34.437375 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 01:06:34.442249 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 01:06:34.442419 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 01:06:34.442605 systemd[1]: Startup finished in 919ms (kernel) + 6.549s (initrd) + 8.718s (userspace) = 16.187s. Jul 10 01:06:34.479931 login[1383]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 10 01:06:34.482546 login[1384]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 10 01:06:34.488825 systemd[1]: Created slice user-500.slice. Jul 10 01:06:34.489645 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 01:06:34.494913 systemd-logind[1256]: New session 1 of user core. Jul 10 01:06:34.497487 systemd-logind[1256]: New session 2 of user core. Jul 10 01:06:34.499922 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 01:06:34.500959 systemd[1]: Starting user@500.service... Jul 10 01:06:34.513955 (systemd)[1395]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:06:34.573205 systemd[1395]: Queued start job for default target default.target. Jul 10 01:06:34.573597 systemd[1395]: Reached target paths.target. Jul 10 01:06:34.573610 systemd[1395]: Reached target sockets.target. Jul 10 01:06:34.573618 systemd[1395]: Reached target timers.target. Jul 10 01:06:34.573625 systemd[1395]: Reached target basic.target. Jul 10 01:06:34.573672 systemd[1395]: Reached target default.target. Jul 10 01:06:34.573691 systemd[1395]: Startup finished in 55ms. Jul 10 01:06:34.573698 systemd[1]: Started user@500.service. Jul 10 01:06:34.574488 systemd[1]: Started session-1.scope. Jul 10 01:06:34.574985 systemd[1]: Started session-2.scope. Jul 10 01:06:35.374781 kubelet[1392]: E0710 01:06:35.374750 1392 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:06:35.375980 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:06:35.376058 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:06:45.574576 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 01:06:45.574700 systemd[1]: Stopped kubelet.service. Jul 10 01:06:45.575740 systemd[1]: Starting kubelet.service... Jul 10 01:06:45.638175 systemd[1]: Started kubelet.service. Jul 10 01:06:45.718284 kubelet[1424]: E0710 01:06:45.718253 1424 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:06:45.720371 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:06:45.720450 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:06:55.824552 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 10 01:06:55.824687 systemd[1]: Stopped kubelet.service. Jul 10 01:06:55.825702 systemd[1]: Starting kubelet.service... Jul 10 01:06:56.106436 systemd[1]: Started kubelet.service. Jul 10 01:06:56.137487 kubelet[1434]: E0710 01:06:56.137452 1434 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:06:56.138737 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:06:56.138814 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:07:02.169017 systemd[1]: Created slice system-sshd.slice. Jul 10 01:07:02.169983 systemd[1]: Started sshd@0-139.178.70.109:22-218.78.46.81:58935.service. Jul 10 01:07:02.550905 systemd[1]: Started sshd@1-139.178.70.109:22-139.178.68.195:38934.service. Jul 10 01:07:02.578208 sshd[1444]: Accepted publickey for core from 139.178.68.195 port 38934 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:07:02.579217 sshd[1444]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:07:02.581658 systemd-logind[1256]: New session 3 of user core. Jul 10 01:07:02.582120 systemd[1]: Started session-3.scope. Jul 10 01:07:02.629370 systemd[1]: Started sshd@2-139.178.70.109:22-139.178.68.195:38944.service. Jul 10 01:07:02.661024 sshd[1449]: Accepted publickey for core from 139.178.68.195 port 38944 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:07:02.662263 sshd[1449]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:07:02.666828 systemd-logind[1256]: New session 4 of user core. Jul 10 01:07:02.667453 systemd[1]: Started session-4.scope. Jul 10 01:07:02.718952 systemd[1]: Started sshd@3-139.178.70.109:22-139.178.68.195:38952.service. Jul 10 01:07:02.719280 sshd[1449]: pam_unix(sshd:session): session closed for user core Jul 10 01:07:02.720815 systemd[1]: sshd@2-139.178.70.109:22-139.178.68.195:38944.service: Deactivated successfully. Jul 10 01:07:02.721208 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 01:07:02.721673 systemd-logind[1256]: Session 4 logged out. Waiting for processes to exit. Jul 10 01:07:02.722160 systemd-logind[1256]: Removed session 4. Jul 10 01:07:02.749325 sshd[1454]: Accepted publickey for core from 139.178.68.195 port 38952 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:07:02.750319 sshd[1454]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:07:02.752720 systemd-logind[1256]: New session 5 of user core. Jul 10 01:07:02.753210 systemd[1]: Started session-5.scope. Jul 10 01:07:02.800385 sshd[1454]: pam_unix(sshd:session): session closed for user core Jul 10 01:07:02.802557 systemd[1]: sshd@3-139.178.70.109:22-139.178.68.195:38952.service: Deactivated successfully. Jul 10 01:07:02.802910 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 01:07:02.803233 systemd-logind[1256]: Session 5 logged out. Waiting for processes to exit. Jul 10 01:07:02.803871 systemd[1]: Started sshd@4-139.178.70.109:22-139.178.68.195:38962.service. Jul 10 01:07:02.804362 systemd-logind[1256]: Removed session 5. Jul 10 01:07:02.830909 sshd[1461]: Accepted publickey for core from 139.178.68.195 port 38962 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:07:02.831665 sshd[1461]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:07:02.834688 systemd[1]: Started session-6.scope. Jul 10 01:07:02.835359 systemd-logind[1256]: New session 6 of user core. Jul 10 01:07:02.884616 sshd[1461]: pam_unix(sshd:session): session closed for user core Jul 10 01:07:02.886848 systemd[1]: Started sshd@5-139.178.70.109:22-139.178.68.195:38976.service. Jul 10 01:07:02.888085 systemd[1]: sshd@4-139.178.70.109:22-139.178.68.195:38962.service: Deactivated successfully. Jul 10 01:07:02.888464 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 01:07:02.888852 systemd-logind[1256]: Session 6 logged out. Waiting for processes to exit. Jul 10 01:07:02.889368 systemd-logind[1256]: Removed session 6. Jul 10 01:07:02.914681 sshd[1466]: Accepted publickey for core from 139.178.68.195 port 38976 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:07:02.915654 sshd[1466]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:07:02.918021 systemd-logind[1256]: New session 7 of user core. Jul 10 01:07:02.918525 systemd[1]: Started session-7.scope. Jul 10 01:07:03.008870 sudo[1470]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 01:07:03.009017 sudo[1470]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 01:07:03.016445 dbus-daemon[1248]: \xd0\xed4{\u001aV: received setenforce notice (enforcing=-1899961296) Jul 10 01:07:03.017444 sudo[1470]: pam_unix(sudo:session): session closed for user root Jul 10 01:07:03.020391 sshd[1466]: pam_unix(sshd:session): session closed for user core Jul 10 01:07:03.021924 systemd[1]: Started sshd@6-139.178.70.109:22-139.178.68.195:38980.service. Jul 10 01:07:03.023199 systemd[1]: sshd@5-139.178.70.109:22-139.178.68.195:38976.service: Deactivated successfully. Jul 10 01:07:03.023621 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 01:07:03.024000 systemd-logind[1256]: Session 7 logged out. Waiting for processes to exit. Jul 10 01:07:03.025433 systemd-logind[1256]: Removed session 7. Jul 10 01:07:03.050494 sshd[1473]: Accepted publickey for core from 139.178.68.195 port 38980 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:07:03.051373 sshd[1473]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:07:03.053913 systemd-logind[1256]: New session 8 of user core. Jul 10 01:07:03.054399 systemd[1]: Started session-8.scope. Jul 10 01:07:03.104109 sudo[1478]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 01:07:03.104250 sudo[1478]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 01:07:03.106050 sudo[1478]: pam_unix(sudo:session): session closed for user root Jul 10 01:07:03.109146 sudo[1477]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 01:07:03.109287 sudo[1477]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 01:07:03.115322 systemd[1]: Stopping audit-rules.service... Jul 10 01:07:03.115000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 01:07:03.117584 kernel: kauditd_printk_skb: 224 callbacks suppressed Jul 10 01:07:03.117620 kernel: audit: type=1305 audit(1752109623.115:202): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 01:07:03.115000 audit[1481]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcdaf0d1a0 a2=420 a3=0 items=0 ppid=1 pid=1481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.122800 kernel: audit: type=1300 audit(1752109623.115:202): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffcdaf0d1a0 a2=420 a3=0 items=0 ppid=1 pid=1481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.122871 kernel: audit: type=1327 audit(1752109623.115:202): proctitle=2F7362696E2F617564697463746C002D44 Jul 10 01:07:03.115000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 01:07:03.122912 auditctl[1481]: No rules Jul 10 01:07:03.124040 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 01:07:03.124157 systemd[1]: Stopped audit-rules.service. Jul 10 01:07:03.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.125449 systemd[1]: Starting audit-rules.service... Jul 10 01:07:03.128372 kernel: audit: type=1131 audit(1752109623.123:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.136701 augenrules[1498]: No rules Jul 10 01:07:03.137177 systemd[1]: Finished audit-rules.service. Jul 10 01:07:03.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.137643 sudo[1477]: pam_unix(sudo:session): session closed for user root Jul 10 01:07:03.137000 audit[1477]: USER_END pid=1477 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.143412 kernel: audit: type=1130 audit(1752109623.136:204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.143468 kernel: audit: type=1106 audit(1752109623.137:205): pid=1477 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.144476 sshd[1473]: pam_unix(sshd:session): session closed for user core Jul 10 01:07:03.146049 systemd[1]: Started sshd@7-139.178.70.109:22-139.178.68.195:38992.service. Jul 10 01:07:03.146354 systemd[1]: sshd@6-139.178.70.109:22-139.178.68.195:38980.service: Deactivated successfully. Jul 10 01:07:03.146766 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 01:07:03.137000 audit[1477]: CRED_DISP pid=1477 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.144000 audit[1473]: USER_END pid=1473 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:03.153431 kernel: audit: type=1104 audit(1752109623.137:206): pid=1477 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.153473 kernel: audit: type=1106 audit(1752109623.144:207): pid=1473 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:03.154308 systemd-logind[1256]: Session 8 logged out. Waiting for processes to exit. Jul 10 01:07:03.155572 systemd-logind[1256]: Removed session 8. Jul 10 01:07:03.144000 audit[1473]: CRED_DISP pid=1473 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:03.145000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.109:22-139.178.68.195:38992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.162660 kernel: audit: type=1104 audit(1752109623.144:208): pid=1473 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:03.162731 kernel: audit: type=1130 audit(1752109623.145:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.109:22-139.178.68.195:38992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.109:22-139.178.68.195:38980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.179000 audit[1503]: USER_ACCT pid=1503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:03.180387 sshd[1503]: Accepted publickey for core from 139.178.68.195 port 38992 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:07:03.180000 audit[1503]: CRED_ACQ pid=1503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:03.180000 audit[1503]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff445158a0 a2=3 a3=0 items=0 ppid=1 pid=1503 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.180000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:07:03.181062 sshd[1503]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:07:03.184304 systemd[1]: Started session-9.scope. Jul 10 01:07:03.185295 systemd-logind[1256]: New session 9 of user core. Jul 10 01:07:03.188000 audit[1503]: USER_START pid=1503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:03.188000 audit[1506]: CRED_ACQ pid=1506 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:07:03.233000 audit[1507]: USER_ACCT pid=1507 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.233000 audit[1507]: CRED_REFR pid=1507 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.233960 sudo[1507]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 01:07:03.234104 sudo[1507]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 01:07:03.234000 audit[1507]: USER_START pid=1507 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.249743 systemd[1]: Starting docker.service... Jul 10 01:07:03.273030 env[1517]: time="2025-07-10T01:07:03.273002616Z" level=info msg="Starting up" Jul 10 01:07:03.273914 env[1517]: time="2025-07-10T01:07:03.273902396Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 01:07:03.273963 env[1517]: time="2025-07-10T01:07:03.273952833Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 01:07:03.274020 env[1517]: time="2025-07-10T01:07:03.274008419Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 01:07:03.274066 env[1517]: time="2025-07-10T01:07:03.274056577Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 01:07:03.275036 env[1517]: time="2025-07-10T01:07:03.275025094Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 01:07:03.275089 env[1517]: time="2025-07-10T01:07:03.275079385Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 01:07:03.275137 env[1517]: time="2025-07-10T01:07:03.275126225Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 01:07:03.275185 env[1517]: time="2025-07-10T01:07:03.275174834Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 01:07:03.297806 env[1517]: time="2025-07-10T01:07:03.297782928Z" level=info msg="Loading containers: start." Jul 10 01:07:03.362000 audit[1547]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1547 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.362000 audit[1547]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffe6a846660 a2=0 a3=7ffe6a84664c items=0 ppid=1517 pid=1547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.362000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 01:07:03.363000 audit[1549]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1549 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.363000 audit[1549]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fffb5b354e0 a2=0 a3=7fffb5b354cc items=0 ppid=1517 pid=1549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.363000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 01:07:03.364000 audit[1551]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1551 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.364000 audit[1551]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe6dc2ed80 a2=0 a3=7ffe6dc2ed6c items=0 ppid=1517 pid=1551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.364000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 01:07:03.365000 audit[1553]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1553 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.365000 audit[1553]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe189bf600 a2=0 a3=7ffe189bf5ec items=0 ppid=1517 pid=1553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.365000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 01:07:03.369000 audit[1555]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1555 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.369000 audit[1555]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffee9f345f0 a2=0 a3=7ffee9f345dc items=0 ppid=1517 pid=1555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.369000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 01:07:03.398000 audit[1560]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1560 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.398000 audit[1560]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff04299810 a2=0 a3=7fff042997fc items=0 ppid=1517 pid=1560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.398000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 01:07:03.452000 audit[1562]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1562 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.452000 audit[1562]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffc3423a9a0 a2=0 a3=7ffc3423a98c items=0 ppid=1517 pid=1562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.452000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 01:07:03.454000 audit[1564]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1564 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.454000 audit[1564]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7fff93c9fef0 a2=0 a3=7fff93c9fedc items=0 ppid=1517 pid=1564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.454000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 01:07:03.455000 audit[1566]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1566 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.455000 audit[1566]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffe7e1d5230 a2=0 a3=7ffe7e1d521c items=0 ppid=1517 pid=1566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.455000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:07:03.466000 audit[1570]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1570 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.466000 audit[1570]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffe564d78a0 a2=0 a3=7ffe564d788c items=0 ppid=1517 pid=1570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.466000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:07:03.471000 audit[1571]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1571 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.471000 audit[1571]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffefe4be130 a2=0 a3=7ffefe4be11c items=0 ppid=1517 pid=1571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.471000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:07:03.485348 kernel: Initializing XFRM netlink socket Jul 10 01:07:03.529340 env[1517]: time="2025-07-10T01:07:03.529304684Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 01:07:03.583000 audit[1580]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1580 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.583000 audit[1580]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffff6577820 a2=0 a3=7ffff657780c items=0 ppid=1517 pid=1580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.583000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 01:07:03.620000 audit[1583]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1583 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.620000 audit[1583]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffe41c82180 a2=0 a3=7ffe41c8216c items=0 ppid=1517 pid=1583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.620000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 01:07:03.623000 audit[1586]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1586 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.623000 audit[1586]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffca0973d50 a2=0 a3=7ffca0973d3c items=0 ppid=1517 pid=1586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.623000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 01:07:03.624000 audit[1588]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1588 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.624000 audit[1588]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd63156a70 a2=0 a3=7ffd63156a5c items=0 ppid=1517 pid=1588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.624000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 01:07:03.625000 audit[1590]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1590 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.625000 audit[1590]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffe632048c0 a2=0 a3=7ffe632048ac items=0 ppid=1517 pid=1590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.625000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 01:07:03.627000 audit[1592]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1592 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.627000 audit[1592]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc5b32a6e0 a2=0 a3=7ffc5b32a6cc items=0 ppid=1517 pid=1592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.627000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 01:07:03.628000 audit[1594]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1594 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.628000 audit[1594]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7fffc7d5aea0 a2=0 a3=7fffc7d5ae8c items=0 ppid=1517 pid=1594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.628000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 01:07:03.666000 audit[1597]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1597 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.666000 audit[1597]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd15936e30 a2=0 a3=7ffd15936e1c items=0 ppid=1517 pid=1597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.666000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 01:07:03.667000 audit[1599]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1599 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.667000 audit[1599]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fff06b9f970 a2=0 a3=7fff06b9f95c items=0 ppid=1517 pid=1599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.667000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 01:07:03.669000 audit[1601]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1601 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.669000 audit[1601]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffcef34fca0 a2=0 a3=7ffcef34fc8c items=0 ppid=1517 pid=1601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.669000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 01:07:03.671000 audit[1603]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1603 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.671000 audit[1603]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffee27a8710 a2=0 a3=7ffee27a86fc items=0 ppid=1517 pid=1603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.671000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 01:07:03.671647 systemd-networkd[1083]: docker0: Link UP Jul 10 01:07:03.720000 audit[1607]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1607 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.720000 audit[1607]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdd4f7c440 a2=0 a3=7ffdd4f7c42c items=0 ppid=1517 pid=1607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.720000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:07:03.724000 audit[1608]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1608 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:03.724000 audit[1608]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff01715db0 a2=0 a3=7fff01715d9c items=0 ppid=1517 pid=1608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:03.724000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 01:07:03.725150 env[1517]: time="2025-07-10T01:07:03.725133796Z" level=info msg="Loading containers: done." Jul 10 01:07:03.732230 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3485655724-merged.mount: Deactivated successfully. Jul 10 01:07:03.773467 env[1517]: time="2025-07-10T01:07:03.773441169Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 01:07:03.773701 env[1517]: time="2025-07-10T01:07:03.773690413Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 01:07:03.773804 env[1517]: time="2025-07-10T01:07:03.773795677Z" level=info msg="Daemon has completed initialization" Jul 10 01:07:03.845175 systemd[1]: Started docker.service. Jul 10 01:07:03.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:03.849661 env[1517]: time="2025-07-10T01:07:03.849619688Z" level=info msg="API listen on /run/docker.sock" Jul 10 01:07:05.663732 env[1271]: time="2025-07-10T01:07:05.663698839Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 10 01:07:06.302000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:06.302000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:06.302698 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 10 01:07:06.302788 systemd[1]: Stopped kubelet.service. Jul 10 01:07:06.303797 systemd[1]: Starting kubelet.service... Jul 10 01:07:06.308927 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4284296729.mount: Deactivated successfully. Jul 10 01:07:06.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:06.723994 systemd[1]: Started kubelet.service. Jul 10 01:07:06.754509 kubelet[1645]: E0710 01:07:06.754474 1645 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:07:06.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 01:07:06.755591 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:07:06.755665 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:07:08.073664 env[1271]: time="2025-07-10T01:07:08.073611296Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:08.075192 env[1271]: time="2025-07-10T01:07:08.075176709Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:08.077067 env[1271]: time="2025-07-10T01:07:08.077052619Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:08.078988 env[1271]: time="2025-07-10T01:07:08.078972217Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:08.079423 env[1271]: time="2025-07-10T01:07:08.079406675Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e\"" Jul 10 01:07:08.079787 env[1271]: time="2025-07-10T01:07:08.079774694Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 10 01:07:08.571037 sshd[1441]: Invalid user support from 218.78.46.81 port 58935 Jul 10 01:07:08.572745 sshd[1441]: pam_faillock(sshd:auth): User unknown Jul 10 01:07:08.572980 sshd[1441]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:07:08.572999 sshd[1441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.46.81 Jul 10 01:07:08.573209 sshd[1441]: pam_faillock(sshd:auth): User unknown Jul 10 01:07:08.575346 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 10 01:07:08.575390 kernel: audit: type=1100 audit(1752109628.572:248): pid=1441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="support" exe="/usr/sbin/sshd" hostname=218.78.46.81 addr=218.78.46.81 terminal=ssh res=failed' Jul 10 01:07:08.572000 audit[1441]: USER_AUTH pid=1441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="support" exe="/usr/sbin/sshd" hostname=218.78.46.81 addr=218.78.46.81 terminal=ssh res=failed' Jul 10 01:07:09.449111 env[1271]: time="2025-07-10T01:07:09.449080652Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:09.450102 env[1271]: time="2025-07-10T01:07:09.450088499Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:09.451788 env[1271]: time="2025-07-10T01:07:09.451773253Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:09.453322 env[1271]: time="2025-07-10T01:07:09.453300184Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:09.453808 env[1271]: time="2025-07-10T01:07:09.453790281Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2\"" Jul 10 01:07:09.454195 env[1271]: time="2025-07-10T01:07:09.454177448Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 10 01:07:10.909259 env[1271]: time="2025-07-10T01:07:10.909231833Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:10.912482 env[1271]: time="2025-07-10T01:07:10.912469049Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:10.913384 env[1271]: time="2025-07-10T01:07:10.913368067Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:10.914966 env[1271]: time="2025-07-10T01:07:10.914949870Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:10.915412 env[1271]: time="2025-07-10T01:07:10.915396536Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b\"" Jul 10 01:07:10.915748 env[1271]: time="2025-07-10T01:07:10.915735204Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 10 01:07:11.246534 sshd[1441]: Failed password for invalid user support from 218.78.46.81 port 58935 ssh2 Jul 10 01:07:12.494972 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2513388525.mount: Deactivated successfully. Jul 10 01:07:13.041594 env[1271]: time="2025-07-10T01:07:13.041561612Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:13.052187 env[1271]: time="2025-07-10T01:07:13.052162472Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:13.057031 env[1271]: time="2025-07-10T01:07:13.057017137Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:13.062877 env[1271]: time="2025-07-10T01:07:13.062863215Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:13.063202 env[1271]: time="2025-07-10T01:07:13.063186810Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19\"" Jul 10 01:07:13.063885 env[1271]: time="2025-07-10T01:07:13.063873310Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 10 01:07:13.136758 sshd[1441]: Received disconnect from 218.78.46.81 port 58935:11: Bye Bye [preauth] Jul 10 01:07:13.136758 sshd[1441]: Disconnected from invalid user support 218.78.46.81 port 58935 [preauth] Jul 10 01:07:13.137692 systemd[1]: sshd@0-139.178.70.109:22-218.78.46.81:58935.service: Deactivated successfully. Jul 10 01:07:13.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-139.178.70.109:22-218.78.46.81:58935 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:13.142371 kernel: audit: type=1131 audit(1752109633.137:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@0-139.178.70.109:22-218.78.46.81:58935 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:13.559071 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2067840566.mount: Deactivated successfully. Jul 10 01:07:14.784601 env[1271]: time="2025-07-10T01:07:14.784575390Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:14.805724 env[1271]: time="2025-07-10T01:07:14.805694776Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:14.815172 env[1271]: time="2025-07-10T01:07:14.815154183Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:14.824743 env[1271]: time="2025-07-10T01:07:14.824725442Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:14.825504 env[1271]: time="2025-07-10T01:07:14.825468322Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Jul 10 01:07:14.825941 env[1271]: time="2025-07-10T01:07:14.825915280Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 01:07:15.418092 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4270061674.mount: Deactivated successfully. Jul 10 01:07:15.421680 env[1271]: time="2025-07-10T01:07:15.421661962Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:15.423469 env[1271]: time="2025-07-10T01:07:15.423457166Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:15.424104 env[1271]: time="2025-07-10T01:07:15.424088453Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:15.424870 env[1271]: time="2025-07-10T01:07:15.424858391Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:15.425194 env[1271]: time="2025-07-10T01:07:15.425179600Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 10 01:07:15.425594 env[1271]: time="2025-07-10T01:07:15.425582593Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 10 01:07:15.858419 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3394710262.mount: Deactivated successfully. Jul 10 01:07:16.831314 kernel: audit: type=1130 audit(1752109636.824:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:16.831418 kernel: audit: type=1131 audit(1752109636.824:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:16.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:16.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:16.824571 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 10 01:07:16.824725 systemd[1]: Stopped kubelet.service. Jul 10 01:07:16.826075 systemd[1]: Starting kubelet.service... Jul 10 01:07:17.269678 update_engine[1257]: I0710 01:07:17.269387 1257 update_attempter.cc:509] Updating boot flags... Jul 10 01:07:18.026886 env[1271]: time="2025-07-10T01:07:18.026842633Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:18.029880 env[1271]: time="2025-07-10T01:07:18.029538214Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:18.032675 env[1271]: time="2025-07-10T01:07:18.032044853Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:18.033192 env[1271]: time="2025-07-10T01:07:18.033174101Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:18.034128 env[1271]: time="2025-07-10T01:07:18.034102859Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Jul 10 01:07:18.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:18.889448 kernel: audit: type=1130 audit(1752109638.886:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:18.886446 systemd[1]: Started kubelet.service. Jul 10 01:07:18.918127 kubelet[1694]: E0710 01:07:18.918095 1694 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 01:07:18.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 01:07:18.919287 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 01:07:18.919373 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 01:07:18.922350 kernel: audit: type=1131 audit(1752109638.919:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 01:07:20.957000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.109:22-107.174.82.39:42118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:20.961371 kernel: audit: type=1130 audit(1752109640.957:254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.109:22-107.174.82.39:42118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:20.957504 systemd[1]: Started sshd@8-139.178.70.109:22-107.174.82.39:42118.service. Jul 10 01:07:21.167449 sshd[1701]: Invalid user mail from 107.174.82.39 port 42118 Jul 10 01:07:21.169608 sshd[1701]: pam_faillock(sshd:auth): User unknown Jul 10 01:07:21.170425 sshd[1701]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:07:21.170496 sshd[1701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.174.82.39 Jul 10 01:07:21.170775 sshd[1701]: pam_faillock(sshd:auth): User unknown Jul 10 01:07:21.170000 audit[1701]: USER_AUTH pid=1701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mail" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:07:21.174369 kernel: audit: type=1100 audit(1752109641.170:255): pid=1701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="mail" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:07:21.762660 systemd[1]: Stopped kubelet.service. Jul 10 01:07:21.762000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:21.765000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:21.768407 kernel: audit: type=1130 audit(1752109641.762:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:21.768441 kernel: audit: type=1131 audit(1752109641.765:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:21.769481 systemd[1]: Starting kubelet.service... Jul 10 01:07:21.789876 systemd[1]: Reloading. Jul 10 01:07:21.844998 /usr/lib/systemd/system-generators/torcx-generator[1730]: time="2025-07-10T01:07:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 01:07:21.845017 /usr/lib/systemd/system-generators/torcx-generator[1730]: time="2025-07-10T01:07:21Z" level=info msg="torcx already run" Jul 10 01:07:21.908412 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 01:07:21.908521 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 01:07:21.922142 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 01:07:21.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.976656 kernel: audit: type=1400 audit(1752109641.966:258): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.976707 kernel: audit: type=1400 audit(1752109641.966:259): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.976724 kernel: audit: type=1400 audit(1752109641.966:260): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.976738 kernel: audit: type=1400 audit(1752109641.966:261): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.976751 kernel: audit: type=1400 audit(1752109641.966:262): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.983886 kernel: audit: type=1400 audit(1752109641.966:263): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.983917 kernel: audit: type=1400 audit(1752109641.966:264): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.986422 kernel: audit: type=1400 audit(1752109641.966:265): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.986454 kernel: audit: type=1400 audit(1752109641.966:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.966000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.966000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.988772 kernel: audit: type=1400 audit(1752109641.971:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.971000 audit: BPF prog-id=43 op=LOAD Jul 10 01:07:21.971000 audit: BPF prog-id=27 op=UNLOAD Jul 10 01:07:21.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.974000 audit: BPF prog-id=44 op=LOAD Jul 10 01:07:21.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit: BPF prog-id=45 op=LOAD Jul 10 01:07:21.981000 audit: BPF prog-id=28 op=UNLOAD Jul 10 01:07:21.981000 audit: BPF prog-id=29 op=UNLOAD Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.981000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.991000 audit: BPF prog-id=46 op=LOAD Jul 10 01:07:21.993000 audit: BPF prog-id=36 op=UNLOAD Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit: BPF prog-id=47 op=LOAD Jul 10 01:07:21.993000 audit: BPF prog-id=30 op=UNLOAD Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit: BPF prog-id=48 op=LOAD Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit: BPF prog-id=49 op=LOAD Jul 10 01:07:21.993000 audit: BPF prog-id=31 op=UNLOAD Jul 10 01:07:21.993000 audit: BPF prog-id=32 op=UNLOAD Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit: BPF prog-id=50 op=LOAD Jul 10 01:07:21.994000 audit: BPF prog-id=37 op=UNLOAD Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit: BPF prog-id=51 op=LOAD Jul 10 01:07:21.995000 audit: BPF prog-id=38 op=UNLOAD Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit: BPF prog-id=52 op=LOAD Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.995000 audit: BPF prog-id=53 op=LOAD Jul 10 01:07:21.995000 audit: BPF prog-id=39 op=UNLOAD Jul 10 01:07:21.995000 audit: BPF prog-id=40 op=UNLOAD Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit: BPF prog-id=54 op=LOAD Jul 10 01:07:21.996000 audit: BPF prog-id=41 op=UNLOAD Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit: BPF prog-id=55 op=LOAD Jul 10 01:07:21.996000 audit: BPF prog-id=33 op=UNLOAD Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit: BPF prog-id=56 op=LOAD Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:21.996000 audit: BPF prog-id=57 op=LOAD Jul 10 01:07:21.996000 audit: BPF prog-id=34 op=UNLOAD Jul 10 01:07:21.996000 audit: BPF prog-id=35 op=UNLOAD Jul 10 01:07:22.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 01:07:22.029759 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 10 01:07:22.029833 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 10 01:07:22.030067 systemd[1]: Stopped kubelet.service. Jul 10 01:07:22.032045 systemd[1]: Starting kubelet.service... Jul 10 01:07:22.562051 systemd[1]: Started kubelet.service. Jul 10 01:07:22.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:22.810410 kubelet[1794]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 01:07:22.810690 kubelet[1794]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 01:07:22.810739 kubelet[1794]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 01:07:22.810848 kubelet[1794]: I0710 01:07:22.810831 1794 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 01:07:22.964443 sshd[1701]: Failed password for invalid user mail from 107.174.82.39 port 42118 ssh2 Jul 10 01:07:23.070752 kubelet[1794]: I0710 01:07:23.070723 1794 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 10 01:07:23.070752 kubelet[1794]: I0710 01:07:23.070748 1794 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 01:07:23.071126 kubelet[1794]: I0710 01:07:23.071112 1794 server.go:956] "Client rotation is on, will bootstrap in background" Jul 10 01:07:23.168071 kubelet[1794]: E0710 01:07:23.168048 1794 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://139.178.70.109:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 10 01:07:23.172829 kubelet[1794]: I0710 01:07:23.172792 1794 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 01:07:23.181659 kubelet[1794]: E0710 01:07:23.181642 1794 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 01:07:23.181761 kubelet[1794]: I0710 01:07:23.181753 1794 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 01:07:23.184938 kubelet[1794]: I0710 01:07:23.184929 1794 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 01:07:23.185105 kubelet[1794]: I0710 01:07:23.185088 1794 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 01:07:23.185249 kubelet[1794]: I0710 01:07:23.185152 1794 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 01:07:23.185395 kubelet[1794]: I0710 01:07:23.185386 1794 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 01:07:23.185440 kubelet[1794]: I0710 01:07:23.185433 1794 container_manager_linux.go:303] "Creating device plugin manager" Jul 10 01:07:23.185549 kubelet[1794]: I0710 01:07:23.185541 1794 state_mem.go:36] "Initialized new in-memory state store" Jul 10 01:07:23.197780 kubelet[1794]: I0710 01:07:23.197769 1794 kubelet.go:480] "Attempting to sync node with API server" Jul 10 01:07:23.197846 kubelet[1794]: I0710 01:07:23.197838 1794 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 01:07:23.197905 kubelet[1794]: I0710 01:07:23.197898 1794 kubelet.go:386] "Adding apiserver pod source" Jul 10 01:07:23.197956 kubelet[1794]: I0710 01:07:23.197949 1794 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 01:07:23.241162 kubelet[1794]: E0710 01:07:23.241088 1794 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://139.178.70.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 10 01:07:23.241325 kubelet[1794]: E0710 01:07:23.241312 1794 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://139.178.70.109:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 10 01:07:23.245758 kubelet[1794]: I0710 01:07:23.245738 1794 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 01:07:23.246113 kubelet[1794]: I0710 01:07:23.246092 1794 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 10 01:07:23.248306 kubelet[1794]: W0710 01:07:23.248291 1794 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 01:07:23.250129 kubelet[1794]: I0710 01:07:23.250115 1794 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 01:07:23.250185 kubelet[1794]: I0710 01:07:23.250169 1794 server.go:1289] "Started kubelet" Jul 10 01:07:23.251995 sshd[1701]: Received disconnect from 107.174.82.39 port 42118:11: Bye Bye [preauth] Jul 10 01:07:23.251995 sshd[1701]: Disconnected from invalid user mail 107.174.82.39 port 42118 [preauth] Jul 10 01:07:23.251000 audit[1794]: AVC avc: denied { mac_admin } for pid=1794 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:23.251000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:07:23.251000 audit[1794]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b76ab0 a1=c000b7e570 a2=c000b76a80 a3=25 items=0 ppid=1 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.251000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:07:23.251000 audit[1794]: AVC avc: denied { mac_admin } for pid=1794 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:23.251000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:07:23.251000 audit[1794]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000c0a060 a1=c000b7e588 a2=c000b76b40 a3=25 items=0 ppid=1 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.251000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:07:23.252471 kubelet[1794]: I0710 01:07:23.252114 1794 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 01:07:23.252471 kubelet[1794]: I0710 01:07:23.252137 1794 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 01:07:23.252801 systemd[1]: sshd@8-139.178.70.109:22-107.174.82.39:42118.service: Deactivated successfully. Jul 10 01:07:23.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.109:22-107.174.82.39:42118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:23.254169 kubelet[1794]: I0710 01:07:23.254142 1794 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 01:07:23.263268 kubelet[1794]: I0710 01:07:23.263216 1794 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 01:07:23.267860 kubelet[1794]: I0710 01:07:23.267843 1794 server.go:317] "Adding debug handlers to kubelet server" Jul 10 01:07:23.268384 kubelet[1794]: I0710 01:07:23.263750 1794 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 01:07:23.268488 kubelet[1794]: I0710 01:07:23.263433 1794 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 01:07:23.268649 kubelet[1794]: I0710 01:07:23.268641 1794 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 01:07:23.268000 audit[1811]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1811 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:23.268000 audit[1811]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffdc50c9d60 a2=0 a3=7ffdc50c9d4c items=0 ppid=1794 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.268000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 01:07:23.268825 kubelet[1794]: E0710 01:07:23.265890 1794 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 01:07:23.268872 kubelet[1794]: I0710 01:07:23.265765 1794 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 01:07:23.269102 kubelet[1794]: I0710 01:07:23.265774 1794 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 01:07:23.269187 kubelet[1794]: I0710 01:07:23.269180 1794 reconciler.go:26] "Reconciler: start to sync state" Jul 10 01:07:23.268000 audit[1812]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1812 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:23.268000 audit[1812]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe96cf85d0 a2=0 a3=7ffe96cf85bc items=0 ppid=1794 pid=1812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.268000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 01:07:23.270000 audit[1814]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1814 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:23.270000 audit[1814]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffcb785bb90 a2=0 a3=7ffcb785bb7c items=0 ppid=1794 pid=1814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.270000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 01:07:23.272000 audit[1816]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1816 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:23.272000 audit[1816]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffec187ff0 a2=0 a3=7fffec187fdc items=0 ppid=1794 pid=1816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.272000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 01:07:23.273222 kubelet[1794]: E0710 01:07:23.270181 1794 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.109:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.109:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850be6ffd75dbd1 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 01:07:23.250129873 +0000 UTC m=+0.685188071,LastTimestamp:2025-07-10 01:07:23.250129873 +0000 UTC m=+0.685188071,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 01:07:23.273428 kubelet[1794]: E0710 01:07:23.273403 1794 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.109:6443: connect: connection refused" interval="200ms" Jul 10 01:07:23.273894 kubelet[1794]: E0710 01:07:23.273880 1794 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://139.178.70.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 10 01:07:23.275075 kubelet[1794]: I0710 01:07:23.275064 1794 factory.go:223] Registration of the containerd container factory successfully Jul 10 01:07:23.275159 kubelet[1794]: I0710 01:07:23.275152 1794 factory.go:223] Registration of the systemd container factory successfully Jul 10 01:07:23.275299 kubelet[1794]: I0710 01:07:23.275289 1794 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 01:07:23.278245 kubelet[1794]: E0710 01:07:23.278228 1794 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 01:07:23.290456 kubelet[1794]: I0710 01:07:23.289994 1794 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 01:07:23.290456 kubelet[1794]: I0710 01:07:23.290006 1794 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 01:07:23.290456 kubelet[1794]: I0710 01:07:23.290018 1794 state_mem.go:36] "Initialized new in-memory state store" Jul 10 01:07:23.291000 audit[1822]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1822 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:23.291000 audit[1822]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffed3b56460 a2=0 a3=7ffed3b5644c items=0 ppid=1794 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.291000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 01:07:23.291947 kubelet[1794]: I0710 01:07:23.291931 1794 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 10 01:07:23.292000 audit[1824]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1824 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:23.292000 audit[1824]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc55febb90 a2=0 a3=7ffc55febb7c items=0 ppid=1794 pid=1824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.292000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 01:07:23.292849 kubelet[1794]: I0710 01:07:23.292831 1794 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 10 01:07:23.292849 kubelet[1794]: I0710 01:07:23.292846 1794 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 10 01:07:23.292901 kubelet[1794]: I0710 01:07:23.292863 1794 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 01:07:23.292901 kubelet[1794]: I0710 01:07:23.292867 1794 kubelet.go:2436] "Starting kubelet main sync loop" Jul 10 01:07:23.292901 kubelet[1794]: E0710 01:07:23.292890 1794 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 01:07:23.292000 audit[1823]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1823 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:23.292000 audit[1823]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffddd0976c0 a2=0 a3=7ffddd0976ac items=0 ppid=1794 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.292000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 01:07:23.293544 kubelet[1794]: I0710 01:07:23.293532 1794 policy_none.go:49] "None policy: Start" Jul 10 01:07:23.293588 kubelet[1794]: I0710 01:07:23.293550 1794 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 01:07:23.293588 kubelet[1794]: I0710 01:07:23.293559 1794 state_mem.go:35] "Initializing new in-memory state store" Jul 10 01:07:23.293990 kubelet[1794]: E0710 01:07:23.293972 1794 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://139.178.70.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 10 01:07:23.293000 audit[1827]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1827 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:23.293000 audit[1827]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc007605a0 a2=0 a3=7ffc0076058c items=0 ppid=1794 pid=1827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.293000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 01:07:23.294000 audit[1826]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1826 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:23.294000 audit[1826]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc37d9cde0 a2=0 a3=7ffc37d9cdcc items=0 ppid=1794 pid=1826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.294000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 01:07:23.294000 audit[1828]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1828 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:23.294000 audit[1828]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd5cd74ef0 a2=0 a3=7ffd5cd74edc items=0 ppid=1794 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.294000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 01:07:23.295000 audit[1829]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1829 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:23.295000 audit[1829]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffcb0d4bdb0 a2=0 a3=7ffcb0d4bd9c items=0 ppid=1794 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.295000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 01:07:23.295000 audit[1830]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1830 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:23.295000 audit[1830]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffff625bb60 a2=0 a3=7ffff625bb4c items=0 ppid=1794 pid=1830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.295000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 01:07:23.298700 systemd[1]: Created slice kubepods.slice. Jul 10 01:07:23.302621 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 01:07:23.305409 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 01:07:23.311296 kubelet[1794]: E0710 01:07:23.311270 1794 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 10 01:07:23.310000 audit[1794]: AVC avc: denied { mac_admin } for pid=1794 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:23.310000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:07:23.310000 audit[1794]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e62780 a1=c000e3ff08 a2=c000e62750 a3=25 items=0 ppid=1 pid=1794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:23.310000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:07:23.313129 kubelet[1794]: E0710 01:07:23.313031 1794 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 10 01:07:23.313129 kubelet[1794]: I0710 01:07:23.313127 1794 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 01:07:23.313200 kubelet[1794]: I0710 01:07:23.313138 1794 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 01:07:23.313506 kubelet[1794]: I0710 01:07:23.313395 1794 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 01:07:23.313895 kubelet[1794]: E0710 01:07:23.313885 1794 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 01:07:23.313973 kubelet[1794]: E0710 01:07:23.313960 1794 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 01:07:23.401150 systemd[1]: Created slice kubepods-burstable-pod0c8dbcf0d67b5c70c987ac7d28dfdb9e.slice. Jul 10 01:07:23.408759 kubelet[1794]: E0710 01:07:23.408742 1794 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 01:07:23.410747 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 10 01:07:23.414680 kubelet[1794]: I0710 01:07:23.414660 1794 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 01:07:23.414866 kubelet[1794]: E0710 01:07:23.414853 1794 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.109:6443/api/v1/nodes\": dial tcp 139.178.70.109:6443: connect: connection refused" node="localhost" Jul 10 01:07:23.416319 kubelet[1794]: E0710 01:07:23.415992 1794 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 01:07:23.417701 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 10 01:07:23.418726 kubelet[1794]: E0710 01:07:23.418713 1794 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 01:07:23.474143 kubelet[1794]: E0710 01:07:23.474105 1794 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.109:6443: connect: connection refused" interval="400ms" Jul 10 01:07:23.570373 kubelet[1794]: I0710 01:07:23.569614 1794 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0c8dbcf0d67b5c70c987ac7d28dfdb9e-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"0c8dbcf0d67b5c70c987ac7d28dfdb9e\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:07:23.570373 kubelet[1794]: I0710 01:07:23.569648 1794 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:23.570373 kubelet[1794]: I0710 01:07:23.569660 1794 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:23.570373 kubelet[1794]: I0710 01:07:23.569670 1794 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 10 01:07:23.570373 kubelet[1794]: I0710 01:07:23.569680 1794 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0c8dbcf0d67b5c70c987ac7d28dfdb9e-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"0c8dbcf0d67b5c70c987ac7d28dfdb9e\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:07:23.570539 kubelet[1794]: I0710 01:07:23.569688 1794 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0c8dbcf0d67b5c70c987ac7d28dfdb9e-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"0c8dbcf0d67b5c70c987ac7d28dfdb9e\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:07:23.570539 kubelet[1794]: I0710 01:07:23.569696 1794 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:23.570539 kubelet[1794]: I0710 01:07:23.569704 1794 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:23.570539 kubelet[1794]: I0710 01:07:23.569722 1794 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:23.616985 kubelet[1794]: I0710 01:07:23.616966 1794 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 01:07:23.617383 kubelet[1794]: E0710 01:07:23.617360 1794 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.109:6443/api/v1/nodes\": dial tcp 139.178.70.109:6443: connect: connection refused" node="localhost" Jul 10 01:07:23.709976 env[1271]: time="2025-07-10T01:07:23.709947237Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:0c8dbcf0d67b5c70c987ac7d28dfdb9e,Namespace:kube-system,Attempt:0,}" Jul 10 01:07:23.717756 env[1271]: time="2025-07-10T01:07:23.717613129Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 10 01:07:23.719141 env[1271]: time="2025-07-10T01:07:23.719101626Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 10 01:07:23.874695 kubelet[1794]: E0710 01:07:23.874672 1794 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.109:6443: connect: connection refused" interval="800ms" Jul 10 01:07:24.018352 kubelet[1794]: I0710 01:07:24.018318 1794 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 01:07:24.018527 kubelet[1794]: E0710 01:07:24.018510 1794 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.109:6443/api/v1/nodes\": dial tcp 139.178.70.109:6443: connect: connection refused" node="localhost" Jul 10 01:07:24.072290 kubelet[1794]: E0710 01:07:24.072261 1794 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://139.178.70.109:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 10 01:07:24.129176 kubelet[1794]: E0710 01:07:24.128886 1794 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://139.178.70.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 10 01:07:24.231355 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount643426149.mount: Deactivated successfully. Jul 10 01:07:24.234916 kubelet[1794]: E0710 01:07:24.234892 1794 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://139.178.70.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 10 01:07:24.237800 env[1271]: time="2025-07-10T01:07:24.237775447Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.239865 env[1271]: time="2025-07-10T01:07:24.239846852Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.240662 env[1271]: time="2025-07-10T01:07:24.240643495Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.241589 env[1271]: time="2025-07-10T01:07:24.241575907Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.242201 env[1271]: time="2025-07-10T01:07:24.242187796Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.243019 env[1271]: time="2025-07-10T01:07:24.243007051Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.243541 env[1271]: time="2025-07-10T01:07:24.243528852Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.243992 env[1271]: time="2025-07-10T01:07:24.243978734Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.245427 env[1271]: time="2025-07-10T01:07:24.245412373Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.247119 env[1271]: time="2025-07-10T01:07:24.247098061Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.247488 env[1271]: time="2025-07-10T01:07:24.247471872Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.249740 env[1271]: time="2025-07-10T01:07:24.249726239Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:24.271676 kubelet[1794]: E0710 01:07:24.271649 1794 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://139.178.70.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 10 01:07:24.273928 env[1271]: time="2025-07-10T01:07:24.262296737Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:07:24.273928 env[1271]: time="2025-07-10T01:07:24.262318855Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:07:24.273928 env[1271]: time="2025-07-10T01:07:24.262325728Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:07:24.273928 env[1271]: time="2025-07-10T01:07:24.262401571Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75 pid=1839 runtime=io.containerd.runc.v2 Jul 10 01:07:24.274199 env[1271]: time="2025-07-10T01:07:24.270721986Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:07:24.274199 env[1271]: time="2025-07-10T01:07:24.270761814Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:07:24.274199 env[1271]: time="2025-07-10T01:07:24.270770289Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:07:24.274199 env[1271]: time="2025-07-10T01:07:24.270915184Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e pid=1855 runtime=io.containerd.runc.v2 Jul 10 01:07:24.287273 systemd[1]: Started cri-containerd-e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75.scope. Jul 10 01:07:24.290615 env[1271]: time="2025-07-10T01:07:24.286000903Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:07:24.290615 env[1271]: time="2025-07-10T01:07:24.286025137Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:07:24.290615 env[1271]: time="2025-07-10T01:07:24.286035261Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:07:24.290615 env[1271]: time="2025-07-10T01:07:24.286259589Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fa4ff22726f68a970a45124e4f2860097f7e78a70f67ad14e335a82fa33f3b1b pid=1881 runtime=io.containerd.runc.v2 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.300000 audit: BPF prog-id=58 op=LOAD Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1839 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539613638366561616465333431396337353330333531613537623937 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1839 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539613638366561616465333431396337353330333531613537623937 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.301000 audit: BPF prog-id=59 op=LOAD Jul 10 01:07:24.301000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ae290 items=0 ppid=1839 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539613638366561616465333431396337353330333531613537623937 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit: BPF prog-id=60 op=LOAD Jul 10 01:07:24.302000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ae2d8 items=0 ppid=1839 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539613638366561616465333431396337353330333531613537623937 Jul 10 01:07:24.302000 audit: BPF prog-id=60 op=UNLOAD Jul 10 01:07:24.302000 audit: BPF prog-id=59 op=UNLOAD Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.302000 audit: BPF prog-id=61 op=LOAD Jul 10 01:07:24.302000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ae6e8 items=0 ppid=1839 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539613638366561616465333431396337353330333531613537623937 Jul 10 01:07:24.307411 systemd[1]: Started cri-containerd-2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e.scope. Jul 10 01:07:24.311765 systemd[1]: Started cri-containerd-fa4ff22726f68a970a45124e4f2860097f7e78a70f67ad14e335a82fa33f3b1b.scope. Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.328000 audit: BPF prog-id=62 op=LOAD Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1881 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661346666323237323666363861393730613435313234653466323836 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1881 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661346666323237323666363861393730613435313234653466323836 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.329000 audit: BPF prog-id=63 op=LOAD Jul 10 01:07:24.329000 audit[1903]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003128a0 items=0 ppid=1881 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661346666323237323666363861393730613435313234653466323836 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit: BPF prog-id=64 op=LOAD Jul 10 01:07:24.330000 audit[1903]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003128e8 items=0 ppid=1881 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661346666323237323666363861393730613435313234653466323836 Jul 10 01:07:24.330000 audit: BPF prog-id=64 op=UNLOAD Jul 10 01:07:24.330000 audit: BPF prog-id=63 op=UNLOAD Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { perfmon } for pid=1903 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit[1903]: AVC avc: denied { bpf } for pid=1903 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.330000 audit: BPF prog-id=65 op=LOAD Jul 10 01:07:24.330000 audit[1903]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000312cf8 items=0 ppid=1881 pid=1903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.330000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661346666323237323666363861393730613435313234653466323836 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit: BPF prog-id=66 op=LOAD Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1855 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262656265313861646361356535643963626463376138626537343430 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1855 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262656265313861646361356535643963626463376138626537343430 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.338000 audit: BPF prog-id=67 op=LOAD Jul 10 01:07:24.338000 audit[1878]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00027be90 items=0 ppid=1855 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.338000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262656265313861646361356535643963626463376138626537343430 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit: BPF prog-id=68 op=LOAD Jul 10 01:07:24.339000 audit[1878]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00027bed8 items=0 ppid=1855 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262656265313861646361356535643963626463376138626537343430 Jul 10 01:07:24.339000 audit: BPF prog-id=68 op=UNLOAD Jul 10 01:07:24.339000 audit: BPF prog-id=67 op=UNLOAD Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { perfmon } for pid=1878 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit[1878]: AVC avc: denied { bpf } for pid=1878 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.339000 audit: BPF prog-id=69 op=LOAD Jul 10 01:07:24.339000 audit[1878]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ee2e8 items=0 ppid=1855 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.339000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262656265313861646361356535643963626463376138626537343430 Jul 10 01:07:24.345850 env[1271]: time="2025-07-10T01:07:24.345817786Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75\"" Jul 10 01:07:24.351003 env[1271]: time="2025-07-10T01:07:24.350982324Z" level=info msg="CreateContainer within sandbox \"e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 01:07:24.369947 env[1271]: time="2025-07-10T01:07:24.369919997Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:0c8dbcf0d67b5c70c987ac7d28dfdb9e,Namespace:kube-system,Attempt:0,} returns sandbox id \"fa4ff22726f68a970a45124e4f2860097f7e78a70f67ad14e335a82fa33f3b1b\"" Jul 10 01:07:24.371393 env[1271]: time="2025-07-10T01:07:24.371370512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e\"" Jul 10 01:07:24.371594 env[1271]: time="2025-07-10T01:07:24.371575847Z" level=info msg="CreateContainer within sandbox \"e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb\"" Jul 10 01:07:24.371974 env[1271]: time="2025-07-10T01:07:24.371961000Z" level=info msg="StartContainer for \"ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb\"" Jul 10 01:07:24.375095 env[1271]: time="2025-07-10T01:07:24.375075051Z" level=info msg="CreateContainer within sandbox \"fa4ff22726f68a970a45124e4f2860097f7e78a70f67ad14e335a82fa33f3b1b\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 01:07:24.376689 env[1271]: time="2025-07-10T01:07:24.376673936Z" level=info msg="CreateContainer within sandbox \"2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 01:07:24.384054 systemd[1]: Started cri-containerd-ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb.scope. Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.398000 audit: BPF prog-id=70 op=LOAD Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1839 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162396565643465333937643032366337383763306632633866383563 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1839 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162396565643465333937643032366337383763306632633866383563 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.399000 audit: BPF prog-id=71 op=LOAD Jul 10 01:07:24.399000 audit[1962]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00023f080 items=0 ppid=1839 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.399000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162396565643465333937643032366337383763306632633866383563 Jul 10 01:07:24.400000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.400000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.400000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.400000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.400000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.400000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.400000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.400000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.400000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.400000 audit: BPF prog-id=72 op=LOAD Jul 10 01:07:24.400000 audit[1962]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00023f0c8 items=0 ppid=1839 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162396565643465333937643032366337383763306632633866383563 Jul 10 01:07:24.400000 audit: BPF prog-id=72 op=UNLOAD Jul 10 01:07:24.401000 audit: BPF prog-id=71 op=UNLOAD Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { perfmon } for pid=1962 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit[1962]: AVC avc: denied { bpf } for pid=1962 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.401000 audit: BPF prog-id=73 op=LOAD Jul 10 01:07:24.401000 audit[1962]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00023f4d8 items=0 ppid=1839 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.401000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162396565643465333937643032366337383763306632633866383563 Jul 10 01:07:24.410683 env[1271]: time="2025-07-10T01:07:24.410657146Z" level=info msg="CreateContainer within sandbox \"fa4ff22726f68a970a45124e4f2860097f7e78a70f67ad14e335a82fa33f3b1b\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"f228cdfb481e2c2dd45f058e187026dca7134fea9d6bac939c3f7dc732ee3773\"" Jul 10 01:07:24.411148 env[1271]: time="2025-07-10T01:07:24.411132406Z" level=info msg="StartContainer for \"f228cdfb481e2c2dd45f058e187026dca7134fea9d6bac939c3f7dc732ee3773\"" Jul 10 01:07:24.411354 env[1271]: time="2025-07-10T01:07:24.411273428Z" level=info msg="CreateContainer within sandbox \"2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0\"" Jul 10 01:07:24.411542 env[1271]: time="2025-07-10T01:07:24.411529830Z" level=info msg="StartContainer for \"fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0\"" Jul 10 01:07:24.426327 systemd[1]: Started cri-containerd-f228cdfb481e2c2dd45f058e187026dca7134fea9d6bac939c3f7dc732ee3773.scope. Jul 10 01:07:24.434760 systemd[1]: Started cri-containerd-fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0.scope. Jul 10 01:07:24.439652 env[1271]: time="2025-07-10T01:07:24.439622669Z" level=info msg="StartContainer for \"ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb\" returns successfully" Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit: BPF prog-id=74 op=LOAD Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1855 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343333396234613136386163373736393564653764306533616463 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1855 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343333396234613136386163373736393564653764306533616463 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit: BPF prog-id=75 op=LOAD Jul 10 01:07:24.443000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001fc8a0 items=0 ppid=1855 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343333396234613136386163373736393564653764306533616463 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit: BPF prog-id=76 op=LOAD Jul 10 01:07:24.443000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001fc8e8 items=0 ppid=1855 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343333396234613136386163373736393564653764306533616463 Jul 10 01:07:24.443000 audit: BPF prog-id=76 op=UNLOAD Jul 10 01:07:24.443000 audit: BPF prog-id=75 op=UNLOAD Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { perfmon } for pid=1996 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit[1996]: AVC avc: denied { bpf } for pid=1996 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.443000 audit: BPF prog-id=77 op=LOAD Jul 10 01:07:24.443000 audit[1996]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001fccf8 items=0 ppid=1855 pid=1996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662343333396234613136386163373736393564653764306533616463 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.446000 audit: BPF prog-id=78 op=LOAD Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1881 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323863646662343831653263326464343566303538653138373032 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1881 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323863646662343831653263326464343566303538653138373032 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.447000 audit: BPF prog-id=79 op=LOAD Jul 10 01:07:24.447000 audit[1997]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001c0400 items=0 ppid=1881 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323863646662343831653263326464343566303538653138373032 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit: BPF prog-id=80 op=LOAD Jul 10 01:07:24.448000 audit[1997]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001c0448 items=0 ppid=1881 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323863646662343831653263326464343566303538653138373032 Jul 10 01:07:24.448000 audit: BPF prog-id=80 op=UNLOAD Jul 10 01:07:24.448000 audit: BPF prog-id=79 op=UNLOAD Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { perfmon } for pid=1997 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit[1997]: AVC avc: denied { bpf } for pid=1997 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:24.448000 audit: BPF prog-id=81 op=LOAD Jul 10 01:07:24.448000 audit[1997]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001c0858 items=0 ppid=1881 pid=1997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:24.448000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632323863646662343831653263326464343566303538653138373032 Jul 10 01:07:24.477633 env[1271]: time="2025-07-10T01:07:24.477593939Z" level=info msg="StartContainer for \"fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0\" returns successfully" Jul 10 01:07:24.479184 env[1271]: time="2025-07-10T01:07:24.479167393Z" level=info msg="StartContainer for \"f228cdfb481e2c2dd45f058e187026dca7134fea9d6bac939c3f7dc732ee3773\" returns successfully" Jul 10 01:07:24.675792 kubelet[1794]: E0710 01:07:24.675716 1794 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.109:6443: connect: connection refused" interval="1.6s" Jul 10 01:07:24.819931 kubelet[1794]: I0710 01:07:24.819699 1794 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 01:07:24.819931 kubelet[1794]: E0710 01:07:24.819910 1794 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.109:6443/api/v1/nodes\": dial tcp 139.178.70.109:6443: connect: connection refused" node="localhost" Jul 10 01:07:25.268454 kubelet[1794]: E0710 01:07:25.268431 1794 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://139.178.70.109:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 10 01:07:25.301916 kubelet[1794]: E0710 01:07:25.301902 1794 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 01:07:25.303223 kubelet[1794]: E0710 01:07:25.303213 1794 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 01:07:25.304314 kubelet[1794]: E0710 01:07:25.304304 1794 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 01:07:25.929603 kubelet[1794]: E0710 01:07:25.929573 1794 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://139.178.70.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.109:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 10 01:07:26.305462 kubelet[1794]: E0710 01:07:26.305403 1794 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 01:07:26.305855 kubelet[1794]: E0710 01:07:26.305843 1794 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 01:07:26.421533 kubelet[1794]: I0710 01:07:26.421512 1794 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 01:07:26.763000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:26.763000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0008da030 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:07:26.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:26.763000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:26.763000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0003943e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:07:26.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:27.296000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.300942 kernel: kauditd_printk_skb: 561 callbacks suppressed Jul 10 01:07:27.300999 kernel: audit: type=1400 audit(1752109647.296:558): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.301023 kernel: audit: type=1300 audit(1752109647.296:558): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00378cbd0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:07:27.296000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00378cbd0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:07:27.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:27.308756 kernel: audit: type=1327 audit(1752109647.296:558): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:27.296000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.312075 kernel: audit: type=1400 audit(1752109647.296:559): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.296000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00378cc60 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:07:27.316072 kernel: audit: type=1300 audit(1752109647.296:559): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00378cc60 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:07:27.316109 kernel: audit: type=1327 audit(1752109647.296:559): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:27.296000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:27.313000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.322366 kernel: audit: type=1400 audit(1752109647.313:560): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.322413 kernel: audit: type=1300 audit(1752109647.313:560): arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c0051297c0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:07:27.313000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5c a1=c0051297c0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:07:27.313000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:27.332345 kernel: audit: type=1327 audit(1752109647.313:560): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:27.322000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.342344 kernel: audit: type=1400 audit(1752109647.322:561): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.322000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=61 a1=c0058ea720 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:07:27.322000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:27.328000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.328000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c0055185e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:07:27.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:27.328000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:27.328000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c006d6d440 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:07:27.328000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:07:27.457371 kubelet[1794]: E0710 01:07:27.457347 1794 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 10 01:07:27.628418 kubelet[1794]: I0710 01:07:27.628392 1794 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 01:07:27.628418 kubelet[1794]: E0710 01:07:27.628418 1794 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 10 01:07:27.667038 kubelet[1794]: I0710 01:07:27.667018 1794 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 01:07:27.680571 kubelet[1794]: E0710 01:07:27.680541 1794 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 10 01:07:27.680731 kubelet[1794]: I0710 01:07:27.680722 1794 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:27.681946 kubelet[1794]: E0710 01:07:27.681923 1794 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:27.681946 kubelet[1794]: I0710 01:07:27.681943 1794 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 01:07:27.682957 kubelet[1794]: E0710 01:07:27.682944 1794 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 10 01:07:28.243781 kubelet[1794]: I0710 01:07:28.243755 1794 apiserver.go:52] "Watching apiserver" Jul 10 01:07:28.270063 kubelet[1794]: I0710 01:07:28.270034 1794 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 01:07:29.263127 systemd[1]: Reloading. Jul 10 01:07:29.327379 kubelet[1794]: I0710 01:07:29.327360 1794 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 01:07:29.339449 /usr/lib/systemd/system-generators/torcx-generator[2090]: time="2025-07-10T01:07:29Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 01:07:29.339467 /usr/lib/systemd/system-generators/torcx-generator[2090]: time="2025-07-10T01:07:29Z" level=info msg="torcx already run" Jul 10 01:07:29.398891 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 01:07:29.399010 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 01:07:29.411633 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit: BPF prog-id=82 op=LOAD Jul 10 01:07:29.463000 audit: BPF prog-id=66 op=UNLOAD Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.463000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit: BPF prog-id=83 op=LOAD Jul 10 01:07:29.464000 audit: BPF prog-id=74 op=UNLOAD Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit: BPF prog-id=84 op=LOAD Jul 10 01:07:29.465000 audit: BPF prog-id=70 op=UNLOAD Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.465000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit: BPF prog-id=85 op=LOAD Jul 10 01:07:29.466000 audit: BPF prog-id=62 op=UNLOAD Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.466000 audit: BPF prog-id=86 op=LOAD Jul 10 01:07:29.467000 audit: BPF prog-id=50 op=UNLOAD Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.467000 audit: BPF prog-id=87 op=LOAD Jul 10 01:07:29.468000 audit: BPF prog-id=46 op=UNLOAD Jul 10 01:07:29.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.468000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit: BPF prog-id=88 op=LOAD Jul 10 01:07:29.469000 audit: BPF prog-id=47 op=UNLOAD Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.469000 audit: BPF prog-id=89 op=LOAD Jul 10 01:07:29.469000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit: BPF prog-id=90 op=LOAD Jul 10 01:07:29.470000 audit: BPF prog-id=48 op=UNLOAD Jul 10 01:07:29.470000 audit: BPF prog-id=49 op=UNLOAD Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.470000 audit: BPF prog-id=91 op=LOAD Jul 10 01:07:29.471000 audit: BPF prog-id=43 op=UNLOAD Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.471000 audit: BPF prog-id=92 op=LOAD Jul 10 01:07:29.471000 audit: BPF prog-id=54 op=UNLOAD Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.472000 audit: BPF prog-id=93 op=LOAD Jul 10 01:07:29.472000 audit: BPF prog-id=58 op=UNLOAD Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit: BPF prog-id=94 op=LOAD Jul 10 01:07:29.473000 audit: BPF prog-id=51 op=UNLOAD Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.473000 audit: BPF prog-id=95 op=LOAD Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit: BPF prog-id=96 op=LOAD Jul 10 01:07:29.474000 audit: BPF prog-id=52 op=UNLOAD Jul 10 01:07:29.474000 audit: BPF prog-id=53 op=UNLOAD Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.474000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.475000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.475000 audit: BPF prog-id=97 op=LOAD Jul 10 01:07:29.475000 audit: BPF prog-id=78 op=UNLOAD Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit: BPF prog-id=98 op=LOAD Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.477000 audit: BPF prog-id=99 op=LOAD Jul 10 01:07:29.477000 audit: BPF prog-id=44 op=UNLOAD Jul 10 01:07:29.477000 audit: BPF prog-id=45 op=UNLOAD Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit: BPF prog-id=100 op=LOAD Jul 10 01:07:29.478000 audit: BPF prog-id=55 op=UNLOAD Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit: BPF prog-id=101 op=LOAD Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:29.478000 audit: BPF prog-id=102 op=LOAD Jul 10 01:07:29.478000 audit: BPF prog-id=56 op=UNLOAD Jul 10 01:07:29.478000 audit: BPF prog-id=57 op=UNLOAD Jul 10 01:07:29.490939 systemd[1]: Stopping kubelet.service... Jul 10 01:07:29.510575 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 01:07:29.510705 systemd[1]: Stopped kubelet.service. Jul 10 01:07:29.510000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:29.512097 systemd[1]: Starting kubelet.service... Jul 10 01:07:31.963718 systemd[1]: Started kubelet.service. Jul 10 01:07:31.963000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:07:32.106372 kubelet[2155]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 01:07:32.106372 kubelet[2155]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 01:07:32.106372 kubelet[2155]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 01:07:32.115139 kubelet[2155]: I0710 01:07:32.115107 2155 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 01:07:32.177605 kubelet[2155]: I0710 01:07:32.177583 2155 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 10 01:07:32.177740 kubelet[2155]: I0710 01:07:32.177731 2155 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 01:07:32.177933 kubelet[2155]: I0710 01:07:32.177923 2155 server.go:956] "Client rotation is on, will bootstrap in background" Jul 10 01:07:32.178942 kubelet[2155]: I0710 01:07:32.178927 2155 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 10 01:07:32.344665 kubelet[2155]: I0710 01:07:32.344640 2155 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 01:07:32.358549 kubelet[2155]: E0710 01:07:32.358522 2155 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 01:07:32.358655 kubelet[2155]: I0710 01:07:32.358645 2155 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 01:07:32.368746 kubelet[2155]: I0710 01:07:32.368734 2155 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 01:07:32.368961 kubelet[2155]: I0710 01:07:32.368942 2155 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 01:07:32.376064 kubelet[2155]: I0710 01:07:32.369004 2155 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 01:07:32.379570 kubelet[2155]: I0710 01:07:32.379556 2155 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 01:07:32.379636 kubelet[2155]: I0710 01:07:32.379628 2155 container_manager_linux.go:303] "Creating device plugin manager" Jul 10 01:07:32.384538 kubelet[2155]: I0710 01:07:32.384525 2155 state_mem.go:36] "Initialized new in-memory state store" Jul 10 01:07:32.384778 kubelet[2155]: I0710 01:07:32.384767 2155 kubelet.go:480] "Attempting to sync node with API server" Jul 10 01:07:32.384848 kubelet[2155]: I0710 01:07:32.384837 2155 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 01:07:32.391795 kubelet[2155]: I0710 01:07:32.391781 2155 kubelet.go:386] "Adding apiserver pod source" Jul 10 01:07:32.398117 kubelet[2155]: I0710 01:07:32.398101 2155 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 01:07:32.412413 kubelet[2155]: I0710 01:07:32.412383 2155 apiserver.go:52] "Watching apiserver" Jul 10 01:07:32.426206 kubelet[2155]: I0710 01:07:32.426183 2155 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 01:07:32.426636 kubelet[2155]: I0710 01:07:32.426619 2155 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 10 01:07:32.444458 kubelet[2155]: I0710 01:07:32.444434 2155 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 01:07:32.444553 kubelet[2155]: I0710 01:07:32.444479 2155 server.go:1289] "Started kubelet" Jul 10 01:07:32.454430 kernel: kauditd_printk_skb: 254 callbacks suppressed Jul 10 01:07:32.454532 kernel: audit: type=1400 audit(1752109652.445:810): avc: denied { mac_admin } for pid=2155 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:32.454553 kernel: audit: type=1401 audit(1752109652.445:810): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:07:32.454574 kernel: audit: type=1300 audit(1752109652.445:810): arch=c000003e syscall=188 success=no exit=-22 a0=c000bad9b0 a1=c00096f8a8 a2=c000bad980 a3=25 items=0 ppid=1 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:32.445000 audit[2155]: AVC avc: denied { mac_admin } for pid=2155 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:32.445000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:07:32.445000 audit[2155]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bad9b0 a1=c00096f8a8 a2=c000bad980 a3=25 items=0 ppid=1 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:32.454767 kubelet[2155]: I0710 01:07:32.445425 2155 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 01:07:32.454767 kubelet[2155]: I0710 01:07:32.445453 2155 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 01:07:32.454767 kubelet[2155]: I0710 01:07:32.445471 2155 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 01:07:32.454767 kubelet[2155]: I0710 01:07:32.446323 2155 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 01:07:32.461071 kernel: audit: type=1327 audit(1752109652.445:810): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:07:32.461178 kernel: audit: type=1400 audit(1752109652.445:811): avc: denied { mac_admin } for pid=2155 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:32.445000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:07:32.445000 audit[2155]: AVC avc: denied { mac_admin } for pid=2155 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:32.461279 kubelet[2155]: I0710 01:07:32.460518 2155 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 01:07:32.462008 kubelet[2155]: I0710 01:07:32.461555 2155 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 01:07:32.462008 kubelet[2155]: I0710 01:07:32.461697 2155 reconciler.go:26] "Reconciler: start to sync state" Jul 10 01:07:32.445000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:07:32.464598 kernel: audit: type=1401 audit(1752109652.445:811): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:07:32.464643 kubelet[2155]: I0710 01:07:32.464356 2155 factory.go:223] Registration of the systemd container factory successfully Jul 10 01:07:32.464643 kubelet[2155]: I0710 01:07:32.464465 2155 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 01:07:32.445000 audit[2155]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000433320 a1=c00096f8c0 a2=c000bada40 a3=25 items=0 ppid=1 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:32.469591 kernel: audit: type=1300 audit(1752109652.445:811): arch=c000003e syscall=188 success=no exit=-22 a0=c000433320 a1=c00096f8c0 a2=c000bada40 a3=25 items=0 ppid=1 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:32.469638 kernel: audit: type=1327 audit(1752109652.445:811): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:07:32.445000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:07:32.488370 kubelet[2155]: I0710 01:07:32.488000 2155 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 01:07:32.489937 kubelet[2155]: I0710 01:07:32.489922 2155 server.go:317] "Adding debug handlers to kubelet server" Jul 10 01:07:32.511244 kubelet[2155]: I0710 01:07:32.511201 2155 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 01:07:32.511593 kubelet[2155]: I0710 01:07:32.511582 2155 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 01:07:32.514165 kubelet[2155]: I0710 01:07:32.513962 2155 factory.go:223] Registration of the containerd container factory successfully Jul 10 01:07:32.522238 kubelet[2155]: I0710 01:07:32.522215 2155 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 10 01:07:32.522881 kubelet[2155]: I0710 01:07:32.522873 2155 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 10 01:07:32.522933 kubelet[2155]: I0710 01:07:32.522925 2155 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 10 01:07:32.522988 kubelet[2155]: I0710 01:07:32.522980 2155 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 01:07:32.523036 kubelet[2155]: I0710 01:07:32.523029 2155 kubelet.go:2436] "Starting kubelet main sync loop" Jul 10 01:07:32.523106 kubelet[2155]: E0710 01:07:32.523095 2155 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 01:07:32.607000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:32.616572 kernel: audit: type=1400 audit(1752109652.607:812): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:32.616630 kernel: audit: type=1300 audit(1752109652.607:812): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a731e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:07:32.607000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a731e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:07:32.616827 kubelet[2155]: I0710 01:07:32.616816 2155 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 01:07:32.616889 kubelet[2155]: I0710 01:07:32.616879 2155 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 01:07:32.616940 kubelet[2155]: I0710 01:07:32.616934 2155 state_mem.go:36] "Initialized new in-memory state store" Jul 10 01:07:32.617068 kubelet[2155]: I0710 01:07:32.617060 2155 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 01:07:32.617119 kubelet[2155]: I0710 01:07:32.617104 2155 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 01:07:32.607000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:32.612000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:32.612000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a73220 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:07:32.612000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:32.612000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:32.612000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b49ea0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:07:32.612000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:32.612000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:07:32.612000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b49f20 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:07:32.612000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:32.654458 kubelet[2155]: E0710 01:07:32.654426 2155 kubelet.go:2460] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 01:07:32.670636 kubelet[2155]: I0710 01:07:32.670613 2155 policy_none.go:49] "None policy: Start" Jul 10 01:07:32.670784 kubelet[2155]: I0710 01:07:32.670772 2155 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 01:07:32.670880 kubelet[2155]: I0710 01:07:32.670869 2155 state_mem.go:35] "Initializing new in-memory state store" Jul 10 01:07:32.671102 kubelet[2155]: I0710 01:07:32.671091 2155 state_mem.go:75] "Updated machine memory state" Jul 10 01:07:32.673560 kubelet[2155]: E0710 01:07:32.673549 2155 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 10 01:07:32.673663 kubelet[2155]: E0710 01:07:32.673652 2155 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 10 01:07:32.673000 audit[2155]: AVC avc: denied { mac_admin } for pid=2155 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:32.673000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 01:07:32.673000 audit[2155]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c001070600 a1=c001102090 a2=c0010705d0 a3=25 items=0 ppid=1 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:32.673000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 01:07:32.674142 kubelet[2155]: I0710 01:07:32.674133 2155 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 01:07:32.674209 kubelet[2155]: I0710 01:07:32.674189 2155 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 01:07:32.675088 kubelet[2155]: E0710 01:07:32.675036 2155 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 01:07:32.675263 kubelet[2155]: I0710 01:07:32.675253 2155 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 01:07:32.754000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:07:32.754000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000c18a80 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:07:32.754000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:07:32.778850 kubelet[2155]: I0710 01:07:32.778833 2155 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 01:07:32.789316 kubelet[2155]: I0710 01:07:32.789299 2155 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 10 01:07:32.789491 kubelet[2155]: I0710 01:07:32.789481 2155 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 01:07:32.855905 kubelet[2155]: I0710 01:07:32.855882 2155 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:32.856203 kubelet[2155]: I0710 01:07:32.856178 2155 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 01:07:32.863365 kubelet[2155]: I0710 01:07:32.863347 2155 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 01:07:32.876072 kubelet[2155]: I0710 01:07:32.875979 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=3.875969703 podStartE2EDuration="3.875969703s" podCreationTimestamp="2025-07-10 01:07:29 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:07:32.875871909 +0000 UTC m=+0.899207709" watchObservedRunningTime="2025-07-10 01:07:32.875969703 +0000 UTC m=+0.899305501" Jul 10 01:07:32.889920 kubelet[2155]: I0710 01:07:32.889884 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=0.889873954 podStartE2EDuration="889.873954ms" podCreationTimestamp="2025-07-10 01:07:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:07:32.884228546 +0000 UTC m=+0.907564350" watchObservedRunningTime="2025-07-10 01:07:32.889873954 +0000 UTC m=+0.913209753" Jul 10 01:07:32.913820 kubelet[2155]: I0710 01:07:32.913789 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/0c8dbcf0d67b5c70c987ac7d28dfdb9e-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"0c8dbcf0d67b5c70c987ac7d28dfdb9e\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:07:32.913820 kubelet[2155]: I0710 01:07:32.913819 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:32.913954 kubelet[2155]: I0710 01:07:32.913830 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:32.913954 kubelet[2155]: I0710 01:07:32.913841 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:32.913954 kubelet[2155]: I0710 01:07:32.913852 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 10 01:07:32.913954 kubelet[2155]: I0710 01:07:32.913860 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/0c8dbcf0d67b5c70c987ac7d28dfdb9e-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"0c8dbcf0d67b5c70c987ac7d28dfdb9e\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:07:32.913954 kubelet[2155]: I0710 01:07:32.913868 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/0c8dbcf0d67b5c70c987ac7d28dfdb9e-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"0c8dbcf0d67b5c70c987ac7d28dfdb9e\") " pod="kube-system/kube-apiserver-localhost" Jul 10 01:07:32.914059 kubelet[2155]: I0710 01:07:32.913878 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:32.914059 kubelet[2155]: I0710 01:07:32.913893 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 01:07:33.553616 kubelet[2155]: I0710 01:07:33.553583 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.553573074 podStartE2EDuration="1.553573074s" podCreationTimestamp="2025-07-10 01:07:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:07:32.889999338 +0000 UTC m=+0.913335142" watchObservedRunningTime="2025-07-10 01:07:33.553573074 +0000 UTC m=+1.576908874" Jul 10 01:07:35.545387 kubelet[2155]: I0710 01:07:35.545368 2155 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 01:07:35.545638 kubelet[2155]: I0710 01:07:35.545617 2155 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 01:07:35.545666 env[1271]: time="2025-07-10T01:07:35.545533296Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 01:07:36.443622 systemd[1]: Created slice kubepods-besteffort-pod1fcaaefa_c659_4dae_9126_cf7cf1688334.slice. Jul 10 01:07:36.537246 kubelet[2155]: I0710 01:07:36.537215 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/1fcaaefa-c659-4dae-9126-cf7cf1688334-kube-proxy\") pod \"kube-proxy-shvm2\" (UID: \"1fcaaefa-c659-4dae-9126-cf7cf1688334\") " pod="kube-system/kube-proxy-shvm2" Jul 10 01:07:36.537246 kubelet[2155]: I0710 01:07:36.537244 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1fcaaefa-c659-4dae-9126-cf7cf1688334-lib-modules\") pod \"kube-proxy-shvm2\" (UID: \"1fcaaefa-c659-4dae-9126-cf7cf1688334\") " pod="kube-system/kube-proxy-shvm2" Jul 10 01:07:36.537399 kubelet[2155]: I0710 01:07:36.537258 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1fcaaefa-c659-4dae-9126-cf7cf1688334-xtables-lock\") pod \"kube-proxy-shvm2\" (UID: \"1fcaaefa-c659-4dae-9126-cf7cf1688334\") " pod="kube-system/kube-proxy-shvm2" Jul 10 01:07:36.537399 kubelet[2155]: I0710 01:07:36.537289 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bj2tb\" (UniqueName: \"kubernetes.io/projected/1fcaaefa-c659-4dae-9126-cf7cf1688334-kube-api-access-bj2tb\") pod \"kube-proxy-shvm2\" (UID: \"1fcaaefa-c659-4dae-9126-cf7cf1688334\") " pod="kube-system/kube-proxy-shvm2" Jul 10 01:07:36.564540 systemd[1]: Created slice kubepods-besteffort-pod6b20fca4_ab6c_49d9_aabe_27d2ac940dcf.slice. Jul 10 01:07:36.637790 kubelet[2155]: I0710 01:07:36.637758 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qsv2j\" (UniqueName: \"kubernetes.io/projected/6b20fca4-ab6c-49d9-aabe-27d2ac940dcf-kube-api-access-qsv2j\") pod \"tigera-operator-747864d56d-lpdxt\" (UID: \"6b20fca4-ab6c-49d9-aabe-27d2ac940dcf\") " pod="tigera-operator/tigera-operator-747864d56d-lpdxt" Jul 10 01:07:36.638020 kubelet[2155]: I0710 01:07:36.637813 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6b20fca4-ab6c-49d9-aabe-27d2ac940dcf-var-lib-calico\") pod \"tigera-operator-747864d56d-lpdxt\" (UID: \"6b20fca4-ab6c-49d9-aabe-27d2ac940dcf\") " pod="tigera-operator/tigera-operator-747864d56d-lpdxt" Jul 10 01:07:36.642039 kubelet[2155]: I0710 01:07:36.642011 2155 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 01:07:36.760375 env[1271]: time="2025-07-10T01:07:36.760290579Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-shvm2,Uid:1fcaaefa-c659-4dae-9126-cf7cf1688334,Namespace:kube-system,Attempt:0,}" Jul 10 01:07:36.851488 env[1271]: time="2025-07-10T01:07:36.851436329Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:07:36.851590 env[1271]: time="2025-07-10T01:07:36.851494239Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:07:36.851590 env[1271]: time="2025-07-10T01:07:36.851515253Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:07:36.851660 env[1271]: time="2025-07-10T01:07:36.851610280Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cb33bd0339b11948bbff25dbaa44f2d0c39d38ae5b39d7c040c28e64b6bb2a6c pid=2211 runtime=io.containerd.runc.v2 Jul 10 01:07:36.868815 env[1271]: time="2025-07-10T01:07:36.868088242Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-lpdxt,Uid:6b20fca4-ab6c-49d9-aabe-27d2ac940dcf,Namespace:tigera-operator,Attempt:0,}" Jul 10 01:07:36.871991 systemd[1]: Started cri-containerd-cb33bd0339b11948bbff25dbaa44f2d0c39d38ae5b39d7c040c28e64b6bb2a6c.scope. Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit: BPF prog-id=103 op=LOAD Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=2211 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:36.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362333362643033333962313139343862626666323564626161343466 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=c items=0 ppid=2211 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:36.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362333362643033333962313139343862626666323564626161343466 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit: BPF prog-id=104 op=LOAD Jul 10 01:07:36.882000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000092410 items=0 ppid=2211 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:36.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362333362643033333962313139343862626666323564626161343466 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit: BPF prog-id=105 op=LOAD Jul 10 01:07:36.882000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c000092458 items=0 ppid=2211 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:36.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362333362643033333962313139343862626666323564626161343466 Jul 10 01:07:36.882000 audit: BPF prog-id=105 op=UNLOAD Jul 10 01:07:36.882000 audit: BPF prog-id=104 op=UNLOAD Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { perfmon } for pid=2222 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit[2222]: AVC avc: denied { bpf } for pid=2222 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:36.882000 audit: BPF prog-id=106 op=LOAD Jul 10 01:07:36.882000 audit[2222]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c000092868 items=0 ppid=2211 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:36.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6362333362643033333962313139343862626666323564626161343466 Jul 10 01:07:36.892011 env[1271]: time="2025-07-10T01:07:36.891984384Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-shvm2,Uid:1fcaaefa-c659-4dae-9126-cf7cf1688334,Namespace:kube-system,Attempt:0,} returns sandbox id \"cb33bd0339b11948bbff25dbaa44f2d0c39d38ae5b39d7c040c28e64b6bb2a6c\"" Jul 10 01:07:36.905159 env[1271]: time="2025-07-10T01:07:36.905126220Z" level=info msg="CreateContainer within sandbox \"cb33bd0339b11948bbff25dbaa44f2d0c39d38ae5b39d7c040c28e64b6bb2a6c\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 01:07:37.172950 env[1271]: time="2025-07-10T01:07:37.172823394Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:07:37.172950 env[1271]: time="2025-07-10T01:07:37.172853362Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:07:37.172950 env[1271]: time="2025-07-10T01:07:37.172862847Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:07:37.173255 env[1271]: time="2025-07-10T01:07:37.173164374Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5 pid=2253 runtime=io.containerd.runc.v2 Jul 10 01:07:37.182895 systemd[1]: Started cri-containerd-186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5.scope. Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit: BPF prog-id=107 op=LOAD Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2253 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:37.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138366439326366396366356563316130323337353662633966303862 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2253 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:37.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138366439326366396366356563316130323337353662633966303862 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit: BPF prog-id=108 op=LOAD Jul 10 01:07:37.202000 audit[2261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000024430 items=0 ppid=2253 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:37.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138366439326366396366356563316130323337353662633966303862 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit: BPF prog-id=109 op=LOAD Jul 10 01:07:37.202000 audit[2261]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000024478 items=0 ppid=2253 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:37.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138366439326366396366356563316130323337353662633966303862 Jul 10 01:07:37.202000 audit: BPF prog-id=109 op=UNLOAD Jul 10 01:07:37.202000 audit: BPF prog-id=108 op=UNLOAD Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.202000 audit: BPF prog-id=110 op=LOAD Jul 10 01:07:37.202000 audit[2261]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000024888 items=0 ppid=2253 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:37.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138366439326366396366356563316130323337353662633966303862 Jul 10 01:07:37.224446 env[1271]: time="2025-07-10T01:07:37.224422883Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-lpdxt,Uid:6b20fca4-ab6c-49d9-aabe-27d2ac940dcf,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5\"" Jul 10 01:07:37.226309 env[1271]: time="2025-07-10T01:07:37.226293192Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 01:07:37.283398 env[1271]: time="2025-07-10T01:07:37.283371986Z" level=info msg="CreateContainer within sandbox \"cb33bd0339b11948bbff25dbaa44f2d0c39d38ae5b39d7c040c28e64b6bb2a6c\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"59ec332f0dc2a14246d1887a2b6bee4047c990208021b625fc0a8e3775aece52\"" Jul 10 01:07:37.283872 env[1271]: time="2025-07-10T01:07:37.283856802Z" level=info msg="StartContainer for \"59ec332f0dc2a14246d1887a2b6bee4047c990208021b625fc0a8e3775aece52\"" Jul 10 01:07:37.294279 systemd[1]: Started cri-containerd-59ec332f0dc2a14246d1887a2b6bee4047c990208021b625fc0a8e3775aece52.scope. Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fa545385e38 items=0 ppid=2211 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:37.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656333333266306463326131343234366431383837613262366265 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit: BPF prog-id=111 op=LOAD Jul 10 01:07:37.304000 audit[2293]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0002e2cc8 items=0 ppid=2211 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:37.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656333333266306463326131343234366431383837613262366265 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit: BPF prog-id=112 op=LOAD Jul 10 01:07:37.304000 audit[2293]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0002e2d18 items=0 ppid=2211 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:37.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656333333266306463326131343234366431383837613262366265 Jul 10 01:07:37.304000 audit: BPF prog-id=112 op=UNLOAD Jul 10 01:07:37.304000 audit: BPF prog-id=111 op=UNLOAD Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { perfmon } for pid=2293 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit[2293]: AVC avc: denied { bpf } for pid=2293 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:37.304000 audit: BPF prog-id=113 op=LOAD Jul 10 01:07:37.304000 audit[2293]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0002e2da8 items=0 ppid=2211 pid=2293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:37.304000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539656333333266306463326131343234366431383837613262366265 Jul 10 01:07:37.338904 env[1271]: time="2025-07-10T01:07:37.338879506Z" level=info msg="StartContainer for \"59ec332f0dc2a14246d1887a2b6bee4047c990208021b625fc0a8e3775aece52\" returns successfully" Jul 10 01:07:37.646745 systemd[1]: run-containerd-runc-k8s.io-cb33bd0339b11948bbff25dbaa44f2d0c39d38ae5b39d7c040c28e64b6bb2a6c-runc.81irjC.mount: Deactivated successfully. Jul 10 01:07:39.160184 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4249289419.mount: Deactivated successfully. Jul 10 01:07:39.735000 audit[2355]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.736648 kernel: kauditd_printk_skb: 174 callbacks suppressed Jul 10 01:07:39.736679 kernel: audit: type=1325 audit(1752109659.735:860): table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.735000 audit[2355]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa0ca4b90 a2=0 a3=7fffa0ca4b7c items=0 ppid=2305 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.742397 kernel: audit: type=1300 audit(1752109659.735:860): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffa0ca4b90 a2=0 a3=7fffa0ca4b7c items=0 ppid=2305 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.742473 kernel: audit: type=1327 audit(1752109659.735:860): proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 01:07:39.735000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 01:07:39.736000 audit[2358]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.736000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd5a742b50 a2=0 a3=7ffd5a742b3c items=0 ppid=2305 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.753901 kernel: audit: type=1325 audit(1752109659.736:861): table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.753944 kernel: audit: type=1300 audit(1752109659.736:861): arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd5a742b50 a2=0 a3=7ffd5a742b3c items=0 ppid=2305 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.736000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 01:07:39.755929 kernel: audit: type=1327 audit(1752109659.736:861): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 01:07:39.755962 kernel: audit: type=1325 audit(1752109659.736:862): table=nat:40 family=10 entries=1 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.736000 audit[2359]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.757774 kernel: audit: type=1300 audit(1752109659.736:862): arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0ec22290 a2=0 a3=7ffc0ec2227c items=0 ppid=2305 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.736000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0ec22290 a2=0 a3=7ffc0ec2227c items=0 ppid=2305 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.736000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 01:07:39.763327 kernel: audit: type=1327 audit(1752109659.736:862): proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 01:07:39.771756 kernel: audit: type=1325 audit(1752109659.738:863): table=filter:41 family=10 entries=1 op=nft_register_chain pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.738000 audit[2360]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.738000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc240280a0 a2=0 a3=7ffc2402808c items=0 ppid=2305 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.738000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 01:07:39.738000 audit[2357]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.738000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc82b7c510 a2=0 a3=7ffc82b7c4fc items=0 ppid=2305 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.738000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 01:07:39.742000 audit[2361]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.742000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcdbfcf330 a2=0 a3=7ffcdbfcf31c items=0 ppid=2305 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.742000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 01:07:39.796192 env[1271]: time="2025-07-10T01:07:39.796161321Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:39.796921 env[1271]: time="2025-07-10T01:07:39.796901189Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:39.797809 env[1271]: time="2025-07-10T01:07:39.797792960Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:39.798731 env[1271]: time="2025-07-10T01:07:39.798717464Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:07:39.798909 env[1271]: time="2025-07-10T01:07:39.798890281Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 10 01:07:39.840680 env[1271]: time="2025-07-10T01:07:39.840651648Z" level=info msg="CreateContainer within sandbox \"186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 01:07:39.848315 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2203268883.mount: Deactivated successfully. Jul 10 01:07:39.855201 env[1271]: time="2025-07-10T01:07:39.855173947Z" level=info msg="CreateContainer within sandbox \"186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325\"" Jul 10 01:07:39.856625 env[1271]: time="2025-07-10T01:07:39.856607269Z" level=info msg="StartContainer for \"fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325\"" Jul 10 01:07:39.865000 audit[2382]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.865000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe3a564220 a2=0 a3=7ffe3a56420c items=0 ppid=2305 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.865000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 01:07:39.868903 systemd[1]: Started cri-containerd-fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325.scope. Jul 10 01:07:39.874000 audit[2384]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2384 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.874000 audit[2384]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd55307220 a2=0 a3=7ffd5530720c items=0 ppid=2305 pid=2384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.874000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 01:07:39.880000 audit[2394]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2394 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.880000 audit[2394]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd8b32c100 a2=0 a3=7ffd8b32c0ec items=0 ppid=2305 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.880000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.880000 audit: BPF prog-id=114 op=LOAD Jul 10 01:07:39.880000 audit[2395]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.880000 audit[2395]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd80713b90 a2=0 a3=7ffd80713b7c items=0 ppid=2305 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.880000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2253 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661373737646533306262316435613832323936336433343962396263 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=2253 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661373737646533306262316435613832323936336433343962396263 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit: BPF prog-id=115 op=LOAD Jul 10 01:07:39.881000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001d0620 items=0 ppid=2253 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661373737646533306262316435613832323936336433343962396263 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.881000 audit: BPF prog-id=116 op=LOAD Jul 10 01:07:39.881000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001d0668 items=0 ppid=2253 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661373737646533306262316435613832323936336433343962396263 Jul 10 01:07:39.882000 audit: BPF prog-id=116 op=UNLOAD Jul 10 01:07:39.882000 audit: BPF prog-id=115 op=UNLOAD Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit[2397]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.882000 audit[2397]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff66c5dc90 a2=0 a3=7fff66c5dc7c items=0 ppid=2305 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.882000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { perfmon } for pid=2372 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit[2372]: AVC avc: denied { bpf } for pid=2372 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:07:39.882000 audit: BPF prog-id=117 op=LOAD Jul 10 01:07:39.882000 audit[2372]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001d0a78 items=0 ppid=2253 pid=2372 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661373737646533306262316435613832323936336433343962396263 Jul 10 01:07:39.883000 audit[2398]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.883000 audit[2398]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8292e130 a2=0 a3=7ffd8292e11c items=0 ppid=2305 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.883000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 01:07:39.889000 audit[2404]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.889000 audit[2404]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc380e0df0 a2=0 a3=7ffc380e0ddc items=0 ppid=2305 pid=2404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 01:07:39.893000 audit[2409]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2409 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.893000 audit[2409]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd681b0ca0 a2=0 a3=7ffd681b0c8c items=0 ppid=2305 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.893000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 01:07:39.894000 audit[2414]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2414 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.894000 audit[2414]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff6b25e590 a2=0 a3=7fff6b25e57c items=0 ppid=2305 pid=2414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.894000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 01:07:39.895020 env[1271]: time="2025-07-10T01:07:39.894993877Z" level=info msg="StartContainer for \"fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325\" returns successfully" Jul 10 01:07:39.898000 audit[2417]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.898000 audit[2417]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd88d79080 a2=0 a3=7ffd88d7906c items=0 ppid=2305 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.898000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 01:07:39.898000 audit[2418]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2418 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.898000 audit[2418]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffed8db2760 a2=0 a3=7ffed8db274c items=0 ppid=2305 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.898000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 01:07:39.900000 audit[2420]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2420 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.900000 audit[2420]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffe5b216d0 a2=0 a3=7fffe5b216bc items=0 ppid=2305 pid=2420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.900000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 01:07:39.904000 audit[2423]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.904000 audit[2423]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc7daff8f0 a2=0 a3=7ffc7daff8dc items=0 ppid=2305 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.904000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 01:07:39.908000 audit[2426]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.908000 audit[2426]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe2d8036d0 a2=0 a3=7ffe2d8036bc items=0 ppid=2305 pid=2426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.908000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 01:07:39.909000 audit[2427]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.909000 audit[2427]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd1ab8d4f0 a2=0 a3=7ffd1ab8d4dc items=0 ppid=2305 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.909000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 01:07:39.913000 audit[2429]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2429 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.913000 audit[2429]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffcc5a08530 a2=0 a3=7ffcc5a0851c items=0 ppid=2305 pid=2429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.913000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 01:07:39.916000 audit[2432]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.916000 audit[2432]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcc39c25b0 a2=0 a3=7ffcc39c259c items=0 ppid=2305 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 01:07:39.917000 audit[2433]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.917000 audit[2433]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe843d4610 a2=0 a3=7ffe843d45fc items=0 ppid=2305 pid=2433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.917000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 01:07:39.918000 audit[2435]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2435 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 01:07:39.918000 audit[2435]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffc72e92680 a2=0 a3=7ffc72e9266c items=0 ppid=2305 pid=2435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.918000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 01:07:39.944000 audit[2441]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2441 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:07:39.944000 audit[2441]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff35c46560 a2=0 a3=7fff35c4654c items=0 ppid=2305 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.944000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:39.953000 audit[2441]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2441 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:07:39.953000 audit[2441]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fff35c46560 a2=0 a3=7fff35c4654c items=0 ppid=2305 pid=2441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.953000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:39.954000 audit[2446]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2446 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.954000 audit[2446]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcfe986990 a2=0 a3=7ffcfe98697c items=0 ppid=2305 pid=2446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.954000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 01:07:39.956000 audit[2448]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2448 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.956000 audit[2448]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd675c9bd0 a2=0 a3=7ffd675c9bbc items=0 ppid=2305 pid=2448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.956000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 01:07:39.959000 audit[2451]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2451 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.959000 audit[2451]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffe48e2ef10 a2=0 a3=7ffe48e2eefc items=0 ppid=2305 pid=2451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.959000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 01:07:39.959000 audit[2452]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2452 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.959000 audit[2452]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc3109f2e0 a2=0 a3=7ffc3109f2cc items=0 ppid=2305 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.959000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 01:07:39.961000 audit[2454]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2454 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.961000 audit[2454]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffb364abb0 a2=0 a3=7fffb364ab9c items=0 ppid=2305 pid=2454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.961000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 01:07:39.962000 audit[2455]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2455 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.962000 audit[2455]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffca66ee8e0 a2=0 a3=7ffca66ee8cc items=0 ppid=2305 pid=2455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.962000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 01:07:39.964000 audit[2457]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2457 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.964000 audit[2457]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffd50663c40 a2=0 a3=7ffd50663c2c items=0 ppid=2305 pid=2457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.964000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 01:07:39.966000 audit[2460]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2460 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.966000 audit[2460]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd8d640eb0 a2=0 a3=7ffd8d640e9c items=0 ppid=2305 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.966000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 01:07:39.966000 audit[2461]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2461 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.966000 audit[2461]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff98d30e80 a2=0 a3=7fff98d30e6c items=0 ppid=2305 pid=2461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.966000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 01:07:39.968000 audit[2463]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2463 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.968000 audit[2463]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffa280dc10 a2=0 a3=7fffa280dbfc items=0 ppid=2305 pid=2463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.968000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 01:07:39.968000 audit[2464]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2464 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.968000 audit[2464]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffff5374fd0 a2=0 a3=7ffff5374fbc items=0 ppid=2305 pid=2464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.968000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 01:07:39.970000 audit[2466]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2466 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.970000 audit[2466]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff371ab560 a2=0 a3=7fff371ab54c items=0 ppid=2305 pid=2466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.970000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 01:07:39.972000 audit[2469]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2469 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.972000 audit[2469]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffeba13550 a2=0 a3=7fffeba1353c items=0 ppid=2305 pid=2469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.972000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 01:07:39.974000 audit[2472]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2472 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.974000 audit[2472]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe03adf130 a2=0 a3=7ffe03adf11c items=0 ppid=2305 pid=2472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.974000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 01:07:39.975000 audit[2473]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2473 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.975000 audit[2473]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffdc1b8a150 a2=0 a3=7ffdc1b8a13c items=0 ppid=2305 pid=2473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.975000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 01:07:39.976000 audit[2475]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2475 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.976000 audit[2475]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffc70bef4d0 a2=0 a3=7ffc70bef4bc items=0 ppid=2305 pid=2475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.976000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 01:07:39.978000 audit[2478]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2478 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.978000 audit[2478]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff3c907fd0 a2=0 a3=7fff3c907fbc items=0 ppid=2305 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.978000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 01:07:39.979000 audit[2479]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2479 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.979000 audit[2479]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdf6ab47e0 a2=0 a3=7ffdf6ab47cc items=0 ppid=2305 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.979000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 01:07:39.980000 audit[2481]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2481 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.980000 audit[2481]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fff09ded6a0 a2=0 a3=7fff09ded68c items=0 ppid=2305 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.980000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 01:07:39.981000 audit[2482]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2482 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.981000 audit[2482]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff7b25cb30 a2=0 a3=7fff7b25cb1c items=0 ppid=2305 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.981000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 01:07:39.983000 audit[2484]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2484 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.983000 audit[2484]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffed0266d20 a2=0 a3=7ffed0266d0c items=0 ppid=2305 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.983000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 01:07:39.985000 audit[2487]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2487 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 01:07:39.985000 audit[2487]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcfb4f5100 a2=0 a3=7ffcfb4f50ec items=0 ppid=2305 pid=2487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.985000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 01:07:39.987000 audit[2489]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2489 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 01:07:39.987000 audit[2489]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffdeb274170 a2=0 a3=7ffdeb27415c items=0 ppid=2305 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.987000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:39.988000 audit[2489]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2489 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 01:07:39.988000 audit[2489]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffdeb274170 a2=0 a3=7ffdeb27415c items=0 ppid=2305 pid=2489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:07:39.988000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:07:40.123434 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3353142747.mount: Deactivated successfully. Jul 10 01:07:40.610194 kubelet[2155]: I0710 01:07:40.610156 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-shvm2" podStartSLOduration=4.610141114 podStartE2EDuration="4.610141114s" podCreationTimestamp="2025-07-10 01:07:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:07:37.61235721 +0000 UTC m=+5.635693016" watchObservedRunningTime="2025-07-10 01:07:40.610141114 +0000 UTC m=+8.633476913" Jul 10 01:07:40.610503 kubelet[2155]: I0710 01:07:40.610251 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-lpdxt" podStartSLOduration=2.018484893 podStartE2EDuration="4.610245169s" podCreationTimestamp="2025-07-10 01:07:36 +0000 UTC" firstStartedPulling="2025-07-10 01:07:37.22517324 +0000 UTC m=+5.248509032" lastFinishedPulling="2025-07-10 01:07:39.816933516 +0000 UTC m=+7.840269308" observedRunningTime="2025-07-10 01:07:40.609410619 +0000 UTC m=+8.632746422" watchObservedRunningTime="2025-07-10 01:07:40.610245169 +0000 UTC m=+8.633580973" Jul 10 01:08:15.966720 sudo[1507]: pam_unix(sudo:session): session closed for user root Jul 10 01:08:15.971533 kernel: kauditd_printk_skb: 200 callbacks suppressed Jul 10 01:08:15.971577 kernel: audit: type=1106 audit(1752109695.965:929): pid=1507 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:08:15.965000 audit[1507]: USER_END pid=1507 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:08:15.974537 kernel: audit: type=1104 audit(1752109695.965:930): pid=1507 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:08:15.965000 audit[1507]: CRED_DISP pid=1507 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 01:08:15.994232 sshd[1503]: pam_unix(sshd:session): session closed for user core Jul 10 01:08:15.993000 audit[1503]: USER_END pid=1503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:16.006978 kernel: audit: type=1106 audit(1752109695.993:931): pid=1503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:16.009582 kernel: audit: type=1104 audit(1752109695.993:932): pid=1503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:15.993000 audit[1503]: CRED_DISP pid=1503 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:08:16.023946 systemd[1]: sshd@7-139.178.70.109:22-139.178.68.195:38992.service: Deactivated successfully. Jul 10 01:08:16.027688 kernel: audit: type=1131 audit(1752109696.022:933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.109:22-139.178.68.195:38992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:16.022000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.109:22-139.178.68.195:38992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:16.024453 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 01:08:16.024537 systemd[1]: session-9.scope: Consumed 4.807s CPU time. Jul 10 01:08:16.027405 systemd-logind[1256]: Session 9 logged out. Waiting for processes to exit. Jul 10 01:08:16.028260 systemd-logind[1256]: Removed session 9. Jul 10 01:08:16.627000 audit[2545]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:16.635397 kernel: audit: type=1325 audit(1752109696.627:934): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:16.635466 kernel: audit: type=1300 audit(1752109696.627:934): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc51c49e50 a2=0 a3=7ffc51c49e3c items=0 ppid=2305 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:16.627000 audit[2545]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc51c49e50 a2=0 a3=7ffc51c49e3c items=0 ppid=2305 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:16.627000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:16.640343 kernel: audit: type=1327 audit(1752109696.627:934): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:16.638000 audit[2545]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:16.646607 kernel: audit: type=1325 audit(1752109696.638:935): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2545 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:16.646667 kernel: audit: type=1300 audit(1752109696.638:935): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc51c49e50 a2=0 a3=0 items=0 ppid=2305 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:16.638000 audit[2545]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc51c49e50 a2=0 a3=0 items=0 ppid=2305 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:16.638000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:16.660000 audit[2547]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:16.660000 audit[2547]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffdfab49130 a2=0 a3=7ffdfab4911c items=0 ppid=2305 pid=2547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:16.660000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:16.664000 audit[2547]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2547 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:16.664000 audit[2547]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffdfab49130 a2=0 a3=0 items=0 ppid=2305 pid=2547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:16.664000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:18.198000 audit[2549]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2549 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:18.198000 audit[2549]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffea4c44340 a2=0 a3=7ffea4c4432c items=0 ppid=2305 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:18.198000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:18.203000 audit[2549]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2549 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:18.203000 audit[2549]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffea4c44340 a2=0 a3=0 items=0 ppid=2305 pid=2549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:18.203000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:18.528041 systemd[1]: Created slice kubepods-besteffort-pod94e2e5f3_4301_45cc_8f27_937112f3bb16.slice. Jul 10 01:08:18.538315 kubelet[2155]: I0710 01:08:18.537646 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/94e2e5f3-4301-45cc-8f27-937112f3bb16-tigera-ca-bundle\") pod \"calico-typha-6568f6dc5c-qjjtz\" (UID: \"94e2e5f3-4301-45cc-8f27-937112f3bb16\") " pod="calico-system/calico-typha-6568f6dc5c-qjjtz" Jul 10 01:08:18.540438 kubelet[2155]: I0710 01:08:18.540413 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-z594d\" (UniqueName: \"kubernetes.io/projected/94e2e5f3-4301-45cc-8f27-937112f3bb16-kube-api-access-z594d\") pod \"calico-typha-6568f6dc5c-qjjtz\" (UID: \"94e2e5f3-4301-45cc-8f27-937112f3bb16\") " pod="calico-system/calico-typha-6568f6dc5c-qjjtz" Jul 10 01:08:18.540553 kubelet[2155]: I0710 01:08:18.540540 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/94e2e5f3-4301-45cc-8f27-937112f3bb16-typha-certs\") pod \"calico-typha-6568f6dc5c-qjjtz\" (UID: \"94e2e5f3-4301-45cc-8f27-937112f3bb16\") " pod="calico-system/calico-typha-6568f6dc5c-qjjtz" Jul 10 01:08:18.784052 systemd[1]: Created slice kubepods-besteffort-podfe41fd09_1dec_4c98_9b09_72bfd9813b68.slice. Jul 10 01:08:18.842597 kubelet[2155]: I0710 01:08:18.842573 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/fe41fd09-1dec-4c98-9b09-72bfd9813b68-flexvol-driver-host\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842773 kubelet[2155]: I0710 01:08:18.842754 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jr6p9\" (UniqueName: \"kubernetes.io/projected/fe41fd09-1dec-4c98-9b09-72bfd9813b68-kube-api-access-jr6p9\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842816 kubelet[2155]: I0710 01:08:18.842778 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/fe41fd09-1dec-4c98-9b09-72bfd9813b68-cni-log-dir\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842816 kubelet[2155]: I0710 01:08:18.842790 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/fe41fd09-1dec-4c98-9b09-72bfd9813b68-lib-modules\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842816 kubelet[2155]: I0710 01:08:18.842802 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fe41fd09-1dec-4c98-9b09-72bfd9813b68-tigera-ca-bundle\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842816 kubelet[2155]: I0710 01:08:18.842813 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/fe41fd09-1dec-4c98-9b09-72bfd9813b68-cni-bin-dir\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842921 kubelet[2155]: I0710 01:08:18.842837 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/fe41fd09-1dec-4c98-9b09-72bfd9813b68-node-certs\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842921 kubelet[2155]: I0710 01:08:18.842850 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/fe41fd09-1dec-4c98-9b09-72bfd9813b68-policysync\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842921 kubelet[2155]: I0710 01:08:18.842859 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/fe41fd09-1dec-4c98-9b09-72bfd9813b68-xtables-lock\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842921 kubelet[2155]: I0710 01:08:18.842870 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/fe41fd09-1dec-4c98-9b09-72bfd9813b68-cni-net-dir\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.842921 kubelet[2155]: I0710 01:08:18.842882 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/fe41fd09-1dec-4c98-9b09-72bfd9813b68-var-lib-calico\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.843077 kubelet[2155]: I0710 01:08:18.842891 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/fe41fd09-1dec-4c98-9b09-72bfd9813b68-var-run-calico\") pod \"calico-node-xxt5q\" (UID: \"fe41fd09-1dec-4c98-9b09-72bfd9813b68\") " pod="calico-system/calico-node-xxt5q" Jul 10 01:08:18.843980 env[1271]: time="2025-07-10T01:08:18.843603834Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6568f6dc5c-qjjtz,Uid:94e2e5f3-4301-45cc-8f27-937112f3bb16,Namespace:calico-system,Attempt:0,}" Jul 10 01:08:18.857257 env[1271]: time="2025-07-10T01:08:18.857203597Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:18.860292 env[1271]: time="2025-07-10T01:08:18.857242378Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:18.860292 env[1271]: time="2025-07-10T01:08:18.857249947Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:18.860292 env[1271]: time="2025-07-10T01:08:18.857390377Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/18da24432ee3dfed8a3ef96e14b1eb663fb2869265a6a8670de15734a26aeee1 pid=2559 runtime=io.containerd.runc.v2 Jul 10 01:08:18.870253 systemd[1]: Started cri-containerd-18da24432ee3dfed8a3ef96e14b1eb663fb2869265a6a8670de15734a26aeee1.scope. Jul 10 01:08:18.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.885000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.885000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit: BPF prog-id=118 op=LOAD Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c7c48 a2=10 a3=1c items=0 ppid=2559 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:18.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138646132343433326565336466656438613365663936653134623165 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c76b0 a2=3c a3=c items=0 ppid=2559 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:18.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138646132343433326565336466656438613365663936653134623165 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.886000 audit: BPF prog-id=119 op=LOAD Jul 10 01:08:18.886000 audit[2570]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c79d8 a2=78 a3=c00024a830 items=0 ppid=2559 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:18.886000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138646132343433326565336466656438613365663936653134623165 Jul 10 01:08:18.887000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.887000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.887000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.887000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.887000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.887000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.887000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.887000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.887000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.887000 audit: BPF prog-id=120 op=LOAD Jul 10 01:08:18.887000 audit[2570]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c7770 a2=78 a3=c00024a878 items=0 ppid=2559 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:18.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138646132343433326565336466656438613365663936653134623165 Jul 10 01:08:18.887000 audit: BPF prog-id=120 op=UNLOAD Jul 10 01:08:18.888000 audit: BPF prog-id=119 op=UNLOAD Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { perfmon } for pid=2570 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit[2570]: AVC avc: denied { bpf } for pid=2570 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:18.888000 audit: BPF prog-id=121 op=LOAD Jul 10 01:08:18.888000 audit[2570]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c7c30 a2=78 a3=c00024ac88 items=0 ppid=2559 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:18.888000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3138646132343433326565336466656438613365663936653134623165 Jul 10 01:08:18.912638 env[1271]: time="2025-07-10T01:08:18.912611444Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6568f6dc5c-qjjtz,Uid:94e2e5f3-4301-45cc-8f27-937112f3bb16,Namespace:calico-system,Attempt:0,} returns sandbox id \"18da24432ee3dfed8a3ef96e14b1eb663fb2869265a6a8670de15734a26aeee1\"" Jul 10 01:08:18.931458 env[1271]: time="2025-07-10T01:08:18.931435904Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 01:08:19.046906 kubelet[2155]: E0710 01:08:19.046829 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.071111 kubelet[2155]: W0710 01:08:19.047022 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.079936 kubelet[2155]: E0710 01:08:19.079706 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5zmkd" podUID="45d2398f-e3d6-4a6c-98e9-53377db422f8" Jul 10 01:08:19.080224 kubelet[2155]: E0710 01:08:19.080209 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.080820 kubelet[2155]: E0710 01:08:19.080806 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.080853 kubelet[2155]: W0710 01:08:19.080819 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.080853 kubelet[2155]: E0710 01:08:19.080836 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.080989 kubelet[2155]: E0710 01:08:19.080978 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.080989 kubelet[2155]: W0710 01:08:19.080986 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.081033 kubelet[2155]: E0710 01:08:19.080993 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.081403 kubelet[2155]: E0710 01:08:19.081390 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.081403 kubelet[2155]: W0710 01:08:19.081400 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.081477 kubelet[2155]: E0710 01:08:19.081417 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.081516 kubelet[2155]: E0710 01:08:19.081503 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.081516 kubelet[2155]: W0710 01:08:19.081513 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.081566 kubelet[2155]: E0710 01:08:19.081518 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.085922 kubelet[2155]: E0710 01:08:19.085901 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.085922 kubelet[2155]: W0710 01:08:19.085917 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.086048 kubelet[2155]: E0710 01:08:19.085931 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.086383 kubelet[2155]: E0710 01:08:19.086372 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.086383 kubelet[2155]: W0710 01:08:19.086380 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.086460 kubelet[2155]: E0710 01:08:19.086387 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.086495 kubelet[2155]: E0710 01:08:19.086483 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.086495 kubelet[2155]: W0710 01:08:19.086490 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.086495 kubelet[2155]: E0710 01:08:19.086495 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.087386 kubelet[2155]: E0710 01:08:19.086891 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.087386 kubelet[2155]: W0710 01:08:19.086898 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.087386 kubelet[2155]: E0710 01:08:19.086905 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.087386 kubelet[2155]: E0710 01:08:19.087005 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.087386 kubelet[2155]: W0710 01:08:19.087010 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.087386 kubelet[2155]: E0710 01:08:19.087016 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.087386 kubelet[2155]: E0710 01:08:19.087117 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.087386 kubelet[2155]: W0710 01:08:19.087140 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.087386 kubelet[2155]: E0710 01:08:19.087152 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.087386 kubelet[2155]: E0710 01:08:19.087287 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.088046 kubelet[2155]: W0710 01:08:19.087293 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.088046 kubelet[2155]: E0710 01:08:19.087300 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.088046 kubelet[2155]: E0710 01:08:19.087414 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.088046 kubelet[2155]: W0710 01:08:19.087423 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.088046 kubelet[2155]: E0710 01:08:19.087429 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.088046 kubelet[2155]: E0710 01:08:19.087509 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.088046 kubelet[2155]: W0710 01:08:19.087513 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.088046 kubelet[2155]: E0710 01:08:19.087521 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.088282 env[1271]: time="2025-07-10T01:08:19.087972589Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-xxt5q,Uid:fe41fd09-1dec-4c98-9b09-72bfd9813b68,Namespace:calico-system,Attempt:0,}" Jul 10 01:08:19.088983 kubelet[2155]: E0710 01:08:19.088945 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.089165 kubelet[2155]: W0710 01:08:19.089015 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.089165 kubelet[2155]: E0710 01:08:19.089030 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.089272 kubelet[2155]: E0710 01:08:19.089264 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.089350 kubelet[2155]: W0710 01:08:19.089325 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.089573 kubelet[2155]: E0710 01:08:19.089564 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.089716 kubelet[2155]: E0710 01:08:19.089710 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.089766 kubelet[2155]: W0710 01:08:19.089757 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.089854 kubelet[2155]: E0710 01:08:19.089845 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.090135 kubelet[2155]: E0710 01:08:19.090112 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.090193 kubelet[2155]: W0710 01:08:19.090184 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.090253 kubelet[2155]: E0710 01:08:19.090244 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.090418 kubelet[2155]: E0710 01:08:19.090411 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.090463 kubelet[2155]: W0710 01:08:19.090454 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.090532 kubelet[2155]: E0710 01:08:19.090524 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.090651 kubelet[2155]: E0710 01:08:19.090645 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.090705 kubelet[2155]: W0710 01:08:19.090692 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.090780 kubelet[2155]: E0710 01:08:19.090772 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.091140 kubelet[2155]: E0710 01:08:19.091132 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.091218 kubelet[2155]: W0710 01:08:19.091209 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.091266 kubelet[2155]: E0710 01:08:19.091257 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.091424 kubelet[2155]: E0710 01:08:19.091416 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.091483 kubelet[2155]: W0710 01:08:19.091474 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.091531 kubelet[2155]: E0710 01:08:19.091523 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.098327 env[1271]: time="2025-07-10T01:08:19.098202709Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:19.098327 env[1271]: time="2025-07-10T01:08:19.098231794Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:19.098327 env[1271]: time="2025-07-10T01:08:19.098238602Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:19.098500 env[1271]: time="2025-07-10T01:08:19.098403707Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/736c50d427d150c905abb0df2c9a5b5b71c38b533f0530f5df20da0c62070295 pid=2623 runtime=io.containerd.runc.v2 Jul 10 01:08:19.107434 systemd[1]: Started cri-containerd-736c50d427d150c905abb0df2c9a5b5b71c38b533f0530f5df20da0c62070295.scope. Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.117000 audit: BPF prog-id=122 op=LOAD Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=2623 pid=2635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:19.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733366335306434323764313530633930356162623064663263396135 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=c items=0 ppid=2623 pid=2635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:19.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733366335306434323764313530633930356162623064663263396135 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit: BPF prog-id=123 op=LOAD Jul 10 01:08:19.118000 audit[2635]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c0000f5d90 items=0 ppid=2623 pid=2635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:19.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733366335306434323764313530633930356162623064663263396135 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.118000 audit: BPF prog-id=124 op=LOAD Jul 10 01:08:19.118000 audit[2635]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c0000f5dd8 items=0 ppid=2623 pid=2635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:19.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733366335306434323764313530633930356162623064663263396135 Jul 10 01:08:19.118000 audit: BPF prog-id=124 op=UNLOAD Jul 10 01:08:19.119000 audit: BPF prog-id=123 op=UNLOAD Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { perfmon } for pid=2635 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit[2635]: AVC avc: denied { bpf } for pid=2635 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:19.119000 audit: BPF prog-id=125 op=LOAD Jul 10 01:08:19.119000 audit[2635]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c0003d01e8 items=0 ppid=2623 pid=2635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:19.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3733366335306434323764313530633930356162623064663263396135 Jul 10 01:08:19.128617 env[1271]: time="2025-07-10T01:08:19.128589242Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-xxt5q,Uid:fe41fd09-1dec-4c98-9b09-72bfd9813b68,Namespace:calico-system,Attempt:0,} returns sandbox id \"736c50d427d150c905abb0df2c9a5b5b71c38b533f0530f5df20da0c62070295\"" Jul 10 01:08:19.171749 kubelet[2155]: E0710 01:08:19.171639 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.171749 kubelet[2155]: W0710 01:08:19.171655 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.171749 kubelet[2155]: E0710 01:08:19.171669 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.171749 kubelet[2155]: I0710 01:08:19.171686 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/45d2398f-e3d6-4a6c-98e9-53377db422f8-varrun\") pod \"csi-node-driver-5zmkd\" (UID: \"45d2398f-e3d6-4a6c-98e9-53377db422f8\") " pod="calico-system/csi-node-driver-5zmkd" Jul 10 01:08:19.171993 kubelet[2155]: E0710 01:08:19.171947 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.171993 kubelet[2155]: W0710 01:08:19.171956 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.171993 kubelet[2155]: E0710 01:08:19.171962 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.171993 kubelet[2155]: I0710 01:08:19.171974 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kbnhf\" (UniqueName: \"kubernetes.io/projected/45d2398f-e3d6-4a6c-98e9-53377db422f8-kube-api-access-kbnhf\") pod \"csi-node-driver-5zmkd\" (UID: \"45d2398f-e3d6-4a6c-98e9-53377db422f8\") " pod="calico-system/csi-node-driver-5zmkd" Jul 10 01:08:19.172123 kubelet[2155]: E0710 01:08:19.172104 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.172123 kubelet[2155]: W0710 01:08:19.172114 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.172177 kubelet[2155]: E0710 01:08:19.172124 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.172229 kubelet[2155]: E0710 01:08:19.172214 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.172229 kubelet[2155]: W0710 01:08:19.172224 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.172284 kubelet[2155]: E0710 01:08:19.172234 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.172359 kubelet[2155]: E0710 01:08:19.172347 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.172359 kubelet[2155]: W0710 01:08:19.172356 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.172421 kubelet[2155]: E0710 01:08:19.172365 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.172421 kubelet[2155]: I0710 01:08:19.172385 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/45d2398f-e3d6-4a6c-98e9-53377db422f8-kubelet-dir\") pod \"csi-node-driver-5zmkd\" (UID: \"45d2398f-e3d6-4a6c-98e9-53377db422f8\") " pod="calico-system/csi-node-driver-5zmkd" Jul 10 01:08:19.172513 kubelet[2155]: E0710 01:08:19.172499 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.172513 kubelet[2155]: W0710 01:08:19.172510 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.172571 kubelet[2155]: E0710 01:08:19.172518 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.172571 kubelet[2155]: I0710 01:08:19.172530 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/45d2398f-e3d6-4a6c-98e9-53377db422f8-registration-dir\") pod \"csi-node-driver-5zmkd\" (UID: \"45d2398f-e3d6-4a6c-98e9-53377db422f8\") " pod="calico-system/csi-node-driver-5zmkd" Jul 10 01:08:19.172628 kubelet[2155]: E0710 01:08:19.172617 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.172628 kubelet[2155]: W0710 01:08:19.172624 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.172684 kubelet[2155]: E0710 01:08:19.172636 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.172684 kubelet[2155]: I0710 01:08:19.172646 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/45d2398f-e3d6-4a6c-98e9-53377db422f8-socket-dir\") pod \"csi-node-driver-5zmkd\" (UID: \"45d2398f-e3d6-4a6c-98e9-53377db422f8\") " pod="calico-system/csi-node-driver-5zmkd" Jul 10 01:08:19.172759 kubelet[2155]: E0710 01:08:19.172748 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.172759 kubelet[2155]: W0710 01:08:19.172756 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.172837 kubelet[2155]: E0710 01:08:19.172761 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.172862 kubelet[2155]: E0710 01:08:19.172837 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.172862 kubelet[2155]: W0710 01:08:19.172842 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.172862 kubelet[2155]: E0710 01:08:19.172847 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.174394 kubelet[2155]: E0710 01:08:19.174381 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.174394 kubelet[2155]: W0710 01:08:19.174391 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.174506 kubelet[2155]: E0710 01:08:19.174399 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.174532 kubelet[2155]: E0710 01:08:19.174529 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.174553 kubelet[2155]: W0710 01:08:19.174534 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.174553 kubelet[2155]: E0710 01:08:19.174541 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.174702 kubelet[2155]: E0710 01:08:19.174687 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.174702 kubelet[2155]: W0710 01:08:19.174696 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.174785 kubelet[2155]: E0710 01:08:19.174706 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.174832 kubelet[2155]: E0710 01:08:19.174818 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.174832 kubelet[2155]: W0710 01:08:19.174828 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.174890 kubelet[2155]: E0710 01:08:19.174835 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.174952 kubelet[2155]: E0710 01:08:19.174942 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.174983 kubelet[2155]: W0710 01:08:19.174952 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.174983 kubelet[2155]: E0710 01:08:19.174962 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.175404 kubelet[2155]: E0710 01:08:19.175388 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.175404 kubelet[2155]: W0710 01:08:19.175398 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.175404 kubelet[2155]: E0710 01:08:19.175404 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.210000 audit[2674]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2674 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:19.210000 audit[2674]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffbc45f2c0 a2=0 a3=7fffbc45f2ac items=0 ppid=2305 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:19.210000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:19.213000 audit[2674]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2674 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:19.213000 audit[2674]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffbc45f2c0 a2=0 a3=0 items=0 ppid=2305 pid=2674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:19.213000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:19.273799 kubelet[2155]: E0710 01:08:19.273770 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.273799 kubelet[2155]: W0710 01:08:19.273792 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.273946 kubelet[2155]: E0710 01:08:19.273816 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.273975 kubelet[2155]: E0710 01:08:19.273969 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.274008 kubelet[2155]: W0710 01:08:19.273978 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.274008 kubelet[2155]: E0710 01:08:19.273985 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.274114 kubelet[2155]: E0710 01:08:19.274098 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.277618 kubelet[2155]: W0710 01:08:19.274118 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.277618 kubelet[2155]: E0710 01:08:19.274127 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.277618 kubelet[2155]: E0710 01:08:19.274238 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.277618 kubelet[2155]: W0710 01:08:19.274244 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.277618 kubelet[2155]: E0710 01:08:19.274258 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.277618 kubelet[2155]: E0710 01:08:19.274414 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.277618 kubelet[2155]: W0710 01:08:19.274421 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.277618 kubelet[2155]: E0710 01:08:19.274427 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.277618 kubelet[2155]: E0710 01:08:19.274565 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.277618 kubelet[2155]: W0710 01:08:19.274571 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.277901 kubelet[2155]: E0710 01:08:19.274585 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.277901 kubelet[2155]: E0710 01:08:19.274702 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.277901 kubelet[2155]: W0710 01:08:19.274717 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.277901 kubelet[2155]: E0710 01:08:19.274727 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.277901 kubelet[2155]: E0710 01:08:19.274841 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.277901 kubelet[2155]: W0710 01:08:19.274847 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.277901 kubelet[2155]: E0710 01:08:19.274860 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.277901 kubelet[2155]: E0710 01:08:19.275006 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.277901 kubelet[2155]: W0710 01:08:19.275017 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.277901 kubelet[2155]: E0710 01:08:19.275024 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283016 kubelet[2155]: E0710 01:08:19.275184 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283016 kubelet[2155]: W0710 01:08:19.275191 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283016 kubelet[2155]: E0710 01:08:19.275197 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283016 kubelet[2155]: E0710 01:08:19.275319 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283016 kubelet[2155]: W0710 01:08:19.275326 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283016 kubelet[2155]: E0710 01:08:19.275347 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283016 kubelet[2155]: E0710 01:08:19.275466 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283016 kubelet[2155]: W0710 01:08:19.275481 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283016 kubelet[2155]: E0710 01:08:19.275488 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283016 kubelet[2155]: E0710 01:08:19.275667 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283260 kubelet[2155]: W0710 01:08:19.275678 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283260 kubelet[2155]: E0710 01:08:19.275688 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283260 kubelet[2155]: E0710 01:08:19.275833 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283260 kubelet[2155]: W0710 01:08:19.275839 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283260 kubelet[2155]: E0710 01:08:19.275847 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283260 kubelet[2155]: E0710 01:08:19.275993 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283260 kubelet[2155]: W0710 01:08:19.276001 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283260 kubelet[2155]: E0710 01:08:19.276009 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283260 kubelet[2155]: E0710 01:08:19.276153 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283260 kubelet[2155]: W0710 01:08:19.276160 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283509 kubelet[2155]: E0710 01:08:19.276168 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283509 kubelet[2155]: E0710 01:08:19.276295 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283509 kubelet[2155]: W0710 01:08:19.276301 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283509 kubelet[2155]: E0710 01:08:19.276308 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283509 kubelet[2155]: E0710 01:08:19.276468 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283509 kubelet[2155]: W0710 01:08:19.276474 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283509 kubelet[2155]: E0710 01:08:19.276481 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283509 kubelet[2155]: E0710 01:08:19.276644 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283509 kubelet[2155]: W0710 01:08:19.276659 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283509 kubelet[2155]: E0710 01:08:19.276668 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283742 kubelet[2155]: E0710 01:08:19.276769 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283742 kubelet[2155]: W0710 01:08:19.276782 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283742 kubelet[2155]: E0710 01:08:19.276789 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283742 kubelet[2155]: E0710 01:08:19.276916 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283742 kubelet[2155]: W0710 01:08:19.276924 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283742 kubelet[2155]: E0710 01:08:19.276938 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283742 kubelet[2155]: E0710 01:08:19.277395 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283742 kubelet[2155]: W0710 01:08:19.277403 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283742 kubelet[2155]: E0710 01:08:19.277411 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283742 kubelet[2155]: E0710 01:08:19.278160 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283972 kubelet[2155]: W0710 01:08:19.278168 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283972 kubelet[2155]: E0710 01:08:19.278176 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283972 kubelet[2155]: E0710 01:08:19.278404 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283972 kubelet[2155]: W0710 01:08:19.278412 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283972 kubelet[2155]: E0710 01:08:19.278419 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.283972 kubelet[2155]: E0710 01:08:19.278947 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.283972 kubelet[2155]: W0710 01:08:19.278956 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.283972 kubelet[2155]: E0710 01:08:19.278964 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:19.285297 kubelet[2155]: E0710 01:08:19.285278 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:19.285297 kubelet[2155]: W0710 01:08:19.285290 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:19.285408 kubelet[2155]: E0710 01:08:19.285300 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:20.318424 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1296106960.mount: Deactivated successfully. Jul 10 01:08:20.523489 kubelet[2155]: E0710 01:08:20.523459 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5zmkd" podUID="45d2398f-e3d6-4a6c-98e9-53377db422f8" Jul 10 01:08:21.124113 env[1271]: time="2025-07-10T01:08:21.124075673Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:21.125275 env[1271]: time="2025-07-10T01:08:21.125256013Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:21.126365 env[1271]: time="2025-07-10T01:08:21.126347282Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:21.127934 env[1271]: time="2025-07-10T01:08:21.127915828Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:21.128325 env[1271]: time="2025-07-10T01:08:21.128300674Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 10 01:08:21.132372 env[1271]: time="2025-07-10T01:08:21.131563215Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 01:08:21.144942 env[1271]: time="2025-07-10T01:08:21.144909978Z" level=info msg="CreateContainer within sandbox \"18da24432ee3dfed8a3ef96e14b1eb663fb2869265a6a8670de15734a26aeee1\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 01:08:21.151580 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount129908720.mount: Deactivated successfully. Jul 10 01:08:21.164767 env[1271]: time="2025-07-10T01:08:21.164733298Z" level=info msg="CreateContainer within sandbox \"18da24432ee3dfed8a3ef96e14b1eb663fb2869265a6a8670de15734a26aeee1\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"5aeb8255468f18e0112041d72e82e4018cd7ef30422b238e23f66fc45f24edfc\"" Jul 10 01:08:21.165781 env[1271]: time="2025-07-10T01:08:21.165517922Z" level=info msg="StartContainer for \"5aeb8255468f18e0112041d72e82e4018cd7ef30422b238e23f66fc45f24edfc\"" Jul 10 01:08:21.183913 systemd[1]: Started cri-containerd-5aeb8255468f18e0112041d72e82e4018cd7ef30422b238e23f66fc45f24edfc.scope. Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.207804 kernel: kauditd_printk_skb: 133 callbacks suppressed Jul 10 01:08:21.210531 kernel: audit: type=1400 audit(1752109701.204:978): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210571 kernel: audit: type=1400 audit(1752109701.204:979): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.217371 kernel: audit: type=1400 audit(1752109701.204:980): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.224784 kernel: audit: type=1400 audit(1752109701.204:981): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.224871 kernel: audit: type=1400 audit(1752109701.204:982): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.228369 kernel: audit: type=1400 audit(1752109701.204:983): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.234271 kernel: audit: type=1400 audit(1752109701.204:984): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.234341 kernel: audit: type=1400 audit(1752109701.204:985): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.240354 kernel: audit: type=1400 audit(1752109701.204:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.240416 kernel: audit: type=1400 audit(1752109701.204:987): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.204000 audit: BPF prog-id=126 op=LOAD Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2559 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:21.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561656238323535343638663138653031313230343164373265383265 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2559 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:21.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561656238323535343638663138653031313230343164373265383265 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.210000 audit: BPF prog-id=127 op=LOAD Jul 10 01:08:21.210000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000099290 items=0 ppid=2559 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:21.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561656238323535343638663138653031313230343164373265383265 Jul 10 01:08:21.211000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.211000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.211000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.211000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.211000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.211000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.211000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.211000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.211000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.211000 audit: BPF prog-id=128 op=LOAD Jul 10 01:08:21.211000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000992d8 items=0 ppid=2559 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:21.211000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561656238323535343638663138653031313230343164373265383265 Jul 10 01:08:21.211000 audit: BPF prog-id=128 op=UNLOAD Jul 10 01:08:21.211000 audit: BPF prog-id=127 op=UNLOAD Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { perfmon } for pid=2712 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit[2712]: AVC avc: denied { bpf } for pid=2712 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:21.212000 audit: BPF prog-id=129 op=LOAD Jul 10 01:08:21.212000 audit[2712]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000996e8 items=0 ppid=2559 pid=2712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:21.212000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561656238323535343638663138653031313230343164373265383265 Jul 10 01:08:21.262695 env[1271]: time="2025-07-10T01:08:21.262655294Z" level=info msg="StartContainer for \"5aeb8255468f18e0112041d72e82e4018cd7ef30422b238e23f66fc45f24edfc\" returns successfully" Jul 10 01:08:21.707281 kubelet[2155]: E0710 01:08:21.707257 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.707281 kubelet[2155]: W0710 01:08:21.707276 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.707281 kubelet[2155]: E0710 01:08:21.707292 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.707583 kubelet[2155]: E0710 01:08:21.707410 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.707583 kubelet[2155]: W0710 01:08:21.707416 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.707583 kubelet[2155]: E0710 01:08:21.707422 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.707583 kubelet[2155]: E0710 01:08:21.707500 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.707583 kubelet[2155]: W0710 01:08:21.707505 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.707583 kubelet[2155]: E0710 01:08:21.707510 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.707583 kubelet[2155]: E0710 01:08:21.707584 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.707726 kubelet[2155]: W0710 01:08:21.707589 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.707726 kubelet[2155]: E0710 01:08:21.707594 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.707726 kubelet[2155]: E0710 01:08:21.707673 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.707726 kubelet[2155]: W0710 01:08:21.707677 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.707726 kubelet[2155]: E0710 01:08:21.707682 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.707822 kubelet[2155]: E0710 01:08:21.707749 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.707822 kubelet[2155]: W0710 01:08:21.707754 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.707822 kubelet[2155]: E0710 01:08:21.707758 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.707882 kubelet[2155]: E0710 01:08:21.707828 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.707882 kubelet[2155]: W0710 01:08:21.707833 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.707882 kubelet[2155]: E0710 01:08:21.707839 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.707941 kubelet[2155]: E0710 01:08:21.707910 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.707941 kubelet[2155]: W0710 01:08:21.707915 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.707941 kubelet[2155]: E0710 01:08:21.707919 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.708001 kubelet[2155]: E0710 01:08:21.707997 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.708022 kubelet[2155]: W0710 01:08:21.708001 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.708022 kubelet[2155]: E0710 01:08:21.708006 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.708088 kubelet[2155]: E0710 01:08:21.708075 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.708088 kubelet[2155]: W0710 01:08:21.708084 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.708150 kubelet[2155]: E0710 01:08:21.708089 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.708187 kubelet[2155]: E0710 01:08:21.708158 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.708733 kubelet[2155]: W0710 01:08:21.708719 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.708733 kubelet[2155]: E0710 01:08:21.708732 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.708831 kubelet[2155]: E0710 01:08:21.708819 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.708831 kubelet[2155]: W0710 01:08:21.708828 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.708896 kubelet[2155]: E0710 01:08:21.708834 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.708922 kubelet[2155]: E0710 01:08:21.708917 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.708922 kubelet[2155]: W0710 01:08:21.708921 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.708963 kubelet[2155]: E0710 01:08:21.708926 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.709010 kubelet[2155]: E0710 01:08:21.708999 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.709010 kubelet[2155]: W0710 01:08:21.709007 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.709071 kubelet[2155]: E0710 01:08:21.709012 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.709147 kubelet[2155]: E0710 01:08:21.709135 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.709147 kubelet[2155]: W0710 01:08:21.709144 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.709208 kubelet[2155]: E0710 01:08:21.709150 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.728998 kubelet[2155]: I0710 01:08:21.699746 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6568f6dc5c-qjjtz" podStartSLOduration=1.48415614 podStartE2EDuration="3.699733286s" podCreationTimestamp="2025-07-10 01:08:18 +0000 UTC" firstStartedPulling="2025-07-10 01:08:18.913425415 +0000 UTC m=+46.936761207" lastFinishedPulling="2025-07-10 01:08:21.129002557 +0000 UTC m=+49.152338353" observedRunningTime="2025-07-10 01:08:21.67874042 +0000 UTC m=+49.702076225" watchObservedRunningTime="2025-07-10 01:08:21.699733286 +0000 UTC m=+49.723069096" Jul 10 01:08:21.796688 kubelet[2155]: E0710 01:08:21.796663 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.796688 kubelet[2155]: W0710 01:08:21.796681 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.796888 kubelet[2155]: E0710 01:08:21.796696 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.796888 kubelet[2155]: E0710 01:08:21.796828 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.796888 kubelet[2155]: W0710 01:08:21.796835 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.796888 kubelet[2155]: E0710 01:08:21.796841 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.796983 kubelet[2155]: E0710 01:08:21.796937 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.796983 kubelet[2155]: W0710 01:08:21.796947 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.796983 kubelet[2155]: E0710 01:08:21.796953 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.797061 kubelet[2155]: E0710 01:08:21.797050 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.797061 kubelet[2155]: W0710 01:08:21.797057 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836284 kubelet[2155]: E0710 01:08:21.797062 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836284 kubelet[2155]: E0710 01:08:21.797149 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836284 kubelet[2155]: W0710 01:08:21.797153 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836284 kubelet[2155]: E0710 01:08:21.797158 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836284 kubelet[2155]: E0710 01:08:21.797237 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836284 kubelet[2155]: W0710 01:08:21.797242 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836284 kubelet[2155]: E0710 01:08:21.797248 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836284 kubelet[2155]: E0710 01:08:21.797348 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836284 kubelet[2155]: W0710 01:08:21.797353 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836284 kubelet[2155]: E0710 01:08:21.797358 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836554 kubelet[2155]: E0710 01:08:21.797528 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836554 kubelet[2155]: W0710 01:08:21.797539 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836554 kubelet[2155]: E0710 01:08:21.797550 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836554 kubelet[2155]: E0710 01:08:21.797651 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836554 kubelet[2155]: W0710 01:08:21.797658 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836554 kubelet[2155]: E0710 01:08:21.797665 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836554 kubelet[2155]: E0710 01:08:21.797753 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836554 kubelet[2155]: W0710 01:08:21.797759 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836554 kubelet[2155]: E0710 01:08:21.797765 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836554 kubelet[2155]: E0710 01:08:21.797865 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836807 kubelet[2155]: W0710 01:08:21.797871 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836807 kubelet[2155]: E0710 01:08:21.797876 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836807 kubelet[2155]: E0710 01:08:21.798048 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836807 kubelet[2155]: W0710 01:08:21.798067 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836807 kubelet[2155]: E0710 01:08:21.798077 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836807 kubelet[2155]: E0710 01:08:21.798179 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836807 kubelet[2155]: W0710 01:08:21.798186 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.836807 kubelet[2155]: E0710 01:08:21.798191 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.836807 kubelet[2155]: E0710 01:08:21.798339 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.836807 kubelet[2155]: W0710 01:08:21.798346 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.844322 kubelet[2155]: E0710 01:08:21.798352 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.844322 kubelet[2155]: E0710 01:08:21.798468 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.844322 kubelet[2155]: W0710 01:08:21.798473 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.844322 kubelet[2155]: E0710 01:08:21.798479 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.844322 kubelet[2155]: E0710 01:08:21.798575 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.844322 kubelet[2155]: W0710 01:08:21.798582 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.844322 kubelet[2155]: E0710 01:08:21.798588 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.844322 kubelet[2155]: E0710 01:08:21.798699 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.844322 kubelet[2155]: W0710 01:08:21.798704 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.844322 kubelet[2155]: E0710 01:08:21.798710 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.844592 kubelet[2155]: E0710 01:08:21.798896 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:21.844592 kubelet[2155]: W0710 01:08:21.798902 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:21.844592 kubelet[2155]: E0710 01:08:21.798908 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:21.852000 audit[2778]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2778 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:21.852000 audit[2778]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcd00149c0 a2=0 a3=7ffcd00149ac items=0 ppid=2305 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:21.852000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:21.856000 audit[2778]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=2778 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:21.856000 audit[2778]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffcd00149c0 a2=0 a3=7ffcd00149ac items=0 ppid=2305 pid=2778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:21.856000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:22.524209 kubelet[2155]: E0710 01:08:22.524177 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5zmkd" podUID="45d2398f-e3d6-4a6c-98e9-53377db422f8" Jul 10 01:08:22.716071 kubelet[2155]: E0710 01:08:22.716043 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.716071 kubelet[2155]: W0710 01:08:22.716063 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.716397 kubelet[2155]: E0710 01:08:22.716079 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.716397 kubelet[2155]: E0710 01:08:22.716206 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.716397 kubelet[2155]: W0710 01:08:22.716213 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.716397 kubelet[2155]: E0710 01:08:22.716219 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.716397 kubelet[2155]: E0710 01:08:22.716314 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.716397 kubelet[2155]: W0710 01:08:22.716322 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.716397 kubelet[2155]: E0710 01:08:22.716341 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.716586 kubelet[2155]: E0710 01:08:22.716443 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.716586 kubelet[2155]: W0710 01:08:22.716449 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.716586 kubelet[2155]: E0710 01:08:22.716455 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.716586 kubelet[2155]: E0710 01:08:22.716554 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.716586 kubelet[2155]: W0710 01:08:22.716560 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.716586 kubelet[2155]: E0710 01:08:22.716566 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.716749 kubelet[2155]: E0710 01:08:22.716653 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.716749 kubelet[2155]: W0710 01:08:22.716659 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.716749 kubelet[2155]: E0710 01:08:22.716665 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.716833 kubelet[2155]: E0710 01:08:22.716755 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.716833 kubelet[2155]: W0710 01:08:22.716760 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.716833 kubelet[2155]: E0710 01:08:22.716767 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.716916 kubelet[2155]: E0710 01:08:22.716857 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.716916 kubelet[2155]: W0710 01:08:22.716862 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.716916 kubelet[2155]: E0710 01:08:22.716868 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.716996 kubelet[2155]: E0710 01:08:22.716964 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.716996 kubelet[2155]: W0710 01:08:22.716970 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.716996 kubelet[2155]: E0710 01:08:22.716976 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.717076 kubelet[2155]: E0710 01:08:22.717063 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.717076 kubelet[2155]: W0710 01:08:22.717069 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.717076 kubelet[2155]: E0710 01:08:22.717074 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.717321 kubelet[2155]: E0710 01:08:22.717163 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.717321 kubelet[2155]: W0710 01:08:22.717168 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.717321 kubelet[2155]: E0710 01:08:22.717174 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.717321 kubelet[2155]: E0710 01:08:22.717262 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.717321 kubelet[2155]: W0710 01:08:22.717268 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.717321 kubelet[2155]: E0710 01:08:22.717273 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.717501 kubelet[2155]: E0710 01:08:22.717376 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.717501 kubelet[2155]: W0710 01:08:22.717382 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.717501 kubelet[2155]: E0710 01:08:22.717388 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.717501 kubelet[2155]: E0710 01:08:22.717476 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.717501 kubelet[2155]: W0710 01:08:22.717482 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.717501 kubelet[2155]: E0710 01:08:22.717488 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.717701 kubelet[2155]: E0710 01:08:22.717574 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.717701 kubelet[2155]: W0710 01:08:22.717579 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.717701 kubelet[2155]: E0710 01:08:22.717585 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.817848 kubelet[2155]: E0710 01:08:22.803414 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.817848 kubelet[2155]: W0710 01:08:22.803431 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.817848 kubelet[2155]: E0710 01:08:22.803446 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.817848 kubelet[2155]: E0710 01:08:22.803587 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.817848 kubelet[2155]: W0710 01:08:22.803593 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.817848 kubelet[2155]: E0710 01:08:22.803600 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.817848 kubelet[2155]: E0710 01:08:22.803746 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.817848 kubelet[2155]: W0710 01:08:22.803753 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.817848 kubelet[2155]: E0710 01:08:22.803760 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.817848 kubelet[2155]: E0710 01:08:22.803924 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819230 kubelet[2155]: W0710 01:08:22.803931 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819230 kubelet[2155]: E0710 01:08:22.803938 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819230 kubelet[2155]: E0710 01:08:22.804081 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819230 kubelet[2155]: W0710 01:08:22.804087 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819230 kubelet[2155]: E0710 01:08:22.804094 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819230 kubelet[2155]: E0710 01:08:22.804214 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819230 kubelet[2155]: W0710 01:08:22.804220 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819230 kubelet[2155]: E0710 01:08:22.804226 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819230 kubelet[2155]: E0710 01:08:22.804365 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819230 kubelet[2155]: W0710 01:08:22.804371 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819588 kubelet[2155]: E0710 01:08:22.804377 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819588 kubelet[2155]: E0710 01:08:22.804584 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819588 kubelet[2155]: W0710 01:08:22.804593 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819588 kubelet[2155]: E0710 01:08:22.804603 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819588 kubelet[2155]: E0710 01:08:22.804727 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819588 kubelet[2155]: W0710 01:08:22.804734 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819588 kubelet[2155]: E0710 01:08:22.804741 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819588 kubelet[2155]: E0710 01:08:22.804842 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819588 kubelet[2155]: W0710 01:08:22.804848 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819588 kubelet[2155]: E0710 01:08:22.804854 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819837 kubelet[2155]: E0710 01:08:22.804990 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819837 kubelet[2155]: W0710 01:08:22.804996 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819837 kubelet[2155]: E0710 01:08:22.805004 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819837 kubelet[2155]: E0710 01:08:22.805159 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819837 kubelet[2155]: W0710 01:08:22.805165 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819837 kubelet[2155]: E0710 01:08:22.805172 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819837 kubelet[2155]: E0710 01:08:22.805312 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.819837 kubelet[2155]: W0710 01:08:22.805318 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.819837 kubelet[2155]: E0710 01:08:22.805325 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.819837 kubelet[2155]: E0710 01:08:22.805461 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.820083 kubelet[2155]: W0710 01:08:22.805467 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.820083 kubelet[2155]: E0710 01:08:22.805473 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.820083 kubelet[2155]: E0710 01:08:22.805622 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.820083 kubelet[2155]: W0710 01:08:22.805628 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.820083 kubelet[2155]: E0710 01:08:22.805636 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.820083 kubelet[2155]: E0710 01:08:22.805843 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.820083 kubelet[2155]: W0710 01:08:22.805850 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.820083 kubelet[2155]: E0710 01:08:22.805858 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.820083 kubelet[2155]: E0710 01:08:22.806038 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.820083 kubelet[2155]: W0710 01:08:22.806045 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.820412 kubelet[2155]: E0710 01:08:22.806051 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.820412 kubelet[2155]: E0710 01:08:22.806196 2155 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 01:08:22.820412 kubelet[2155]: W0710 01:08:22.806202 2155 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 01:08:22.820412 kubelet[2155]: E0710 01:08:22.806208 2155 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 01:08:22.909168 env[1271]: time="2025-07-10T01:08:22.909135622Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:22.910127 env[1271]: time="2025-07-10T01:08:22.910093891Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:22.911016 env[1271]: time="2025-07-10T01:08:22.910995228Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:22.913521 env[1271]: time="2025-07-10T01:08:22.913502780Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:22.913792 env[1271]: time="2025-07-10T01:08:22.913768362Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 10 01:08:22.917176 env[1271]: time="2025-07-10T01:08:22.917145061Z" level=info msg="CreateContainer within sandbox \"736c50d427d150c905abb0df2c9a5b5b71c38b533f0530f5df20da0c62070295\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 01:08:22.924800 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4099709852.mount: Deactivated successfully. Jul 10 01:08:22.932537 env[1271]: time="2025-07-10T01:08:22.932501009Z" level=info msg="CreateContainer within sandbox \"736c50d427d150c905abb0df2c9a5b5b71c38b533f0530f5df20da0c62070295\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"ea1b6c3425cd0f893da2f6b4284d3896591b8355aad16af9befcc9bbd7cc3339\"" Jul 10 01:08:22.933731 env[1271]: time="2025-07-10T01:08:22.933026934Z" level=info msg="StartContainer for \"ea1b6c3425cd0f893da2f6b4284d3896591b8355aad16af9befcc9bbd7cc3339\"" Jul 10 01:08:22.968217 systemd[1]: Started cri-containerd-ea1b6c3425cd0f893da2f6b4284d3896591b8355aad16af9befcc9bbd7cc3339.scope. Jul 10 01:08:22.981000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.981000 audit[2820]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f9489588a48 items=0 ppid=2623 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:22.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561316236633334323563643066383933646132663662343238346433 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit: BPF prog-id=130 op=LOAD Jul 10 01:08:22.982000 audit[2820]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000370978 items=0 ppid=2623 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:22.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561316236633334323563643066383933646132663662343238346433 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit: BPF prog-id=131 op=LOAD Jul 10 01:08:22.982000 audit[2820]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003709c8 items=0 ppid=2623 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:22.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561316236633334323563643066383933646132663662343238346433 Jul 10 01:08:22.982000 audit: BPF prog-id=131 op=UNLOAD Jul 10 01:08:22.982000 audit: BPF prog-id=130 op=UNLOAD Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { perfmon } for pid=2820 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit[2820]: AVC avc: denied { bpf } for pid=2820 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:22.982000 audit: BPF prog-id=132 op=LOAD Jul 10 01:08:22.982000 audit[2820]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000370a58 items=0 ppid=2623 pid=2820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:22.982000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561316236633334323563643066383933646132663662343238346433 Jul 10 01:08:22.997947 systemd[1]: cri-containerd-ea1b6c3425cd0f893da2f6b4284d3896591b8355aad16af9befcc9bbd7cc3339.scope: Deactivated successfully. Jul 10 01:08:23.001000 audit: BPF prog-id=132 op=UNLOAD Jul 10 01:08:23.012583 env[1271]: time="2025-07-10T01:08:23.012555854Z" level=info msg="StartContainer for \"ea1b6c3425cd0f893da2f6b4284d3896591b8355aad16af9befcc9bbd7cc3339\" returns successfully" Jul 10 01:08:23.098553 env[1271]: time="2025-07-10T01:08:23.098507005Z" level=info msg="shim disconnected" id=ea1b6c3425cd0f893da2f6b4284d3896591b8355aad16af9befcc9bbd7cc3339 Jul 10 01:08:23.098553 env[1271]: time="2025-07-10T01:08:23.098550483Z" level=warning msg="cleaning up after shim disconnected" id=ea1b6c3425cd0f893da2f6b4284d3896591b8355aad16af9befcc9bbd7cc3339 namespace=k8s.io Jul 10 01:08:23.098752 env[1271]: time="2025-07-10T01:08:23.098562315Z" level=info msg="cleaning up dead shim" Jul 10 01:08:23.104772 env[1271]: time="2025-07-10T01:08:23.104745478Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:08:23Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2858 runtime=io.containerd.runc.v2\n" Jul 10 01:08:23.134694 systemd[1]: run-containerd-runc-k8s.io-ea1b6c3425cd0f893da2f6b4284d3896591b8355aad16af9befcc9bbd7cc3339-runc.TqHC7o.mount: Deactivated successfully. Jul 10 01:08:23.134756 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ea1b6c3425cd0f893da2f6b4284d3896591b8355aad16af9befcc9bbd7cc3339-rootfs.mount: Deactivated successfully. Jul 10 01:08:23.653900 env[1271]: time="2025-07-10T01:08:23.653862171Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 01:08:24.524185 kubelet[2155]: E0710 01:08:24.524147 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5zmkd" podUID="45d2398f-e3d6-4a6c-98e9-53377db422f8" Jul 10 01:08:26.524348 kubelet[2155]: E0710 01:08:26.524121 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5zmkd" podUID="45d2398f-e3d6-4a6c-98e9-53377db422f8" Jul 10 01:08:26.777000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:26.783974 kernel: kauditd_printk_skb: 97 callbacks suppressed Jul 10 01:08:26.784027 kernel: audit: type=1400 audit(1752109706.777:1005): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:26.784051 kernel: audit: type=1300 audit(1752109706.777:1005): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002994440 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:26.777000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002994440 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:26.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:26.777000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:26.796817 kernel: audit: type=1327 audit(1752109706.777:1005): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:26.796926 kernel: audit: type=1400 audit(1752109706.777:1006): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:26.796950 kernel: audit: type=1300 audit(1752109706.777:1006): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f728d0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:26.777000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f728d0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:26.777000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:26.804403 kernel: audit: type=1327 audit(1752109706.777:1006): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:26.812349 env[1271]: time="2025-07-10T01:08:26.812317631Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:26.816084 env[1271]: time="2025-07-10T01:08:26.816067754Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:26.817844 env[1271]: time="2025-07-10T01:08:26.817830662Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:26.818867 env[1271]: time="2025-07-10T01:08:26.818854825Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:26.819221 env[1271]: time="2025-07-10T01:08:26.819202464Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 10 01:08:26.822040 env[1271]: time="2025-07-10T01:08:26.822018320Z" level=info msg="CreateContainer within sandbox \"736c50d427d150c905abb0df2c9a5b5b71c38b533f0530f5df20da0c62070295\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 01:08:26.831456 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount142770345.mount: Deactivated successfully. Jul 10 01:08:26.841020 env[1271]: time="2025-07-10T01:08:26.840983656Z" level=info msg="CreateContainer within sandbox \"736c50d427d150c905abb0df2c9a5b5b71c38b533f0530f5df20da0c62070295\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"d105625659c2318cdca676de4d40901569e75b1b484a9451d6c4d2b965655dd8\"" Jul 10 01:08:26.841453 env[1271]: time="2025-07-10T01:08:26.841432475Z" level=info msg="StartContainer for \"d105625659c2318cdca676de4d40901569e75b1b484a9451d6c4d2b965655dd8\"" Jul 10 01:08:26.860240 systemd[1]: Started cri-containerd-d105625659c2318cdca676de4d40901569e75b1b484a9451d6c4d2b965655dd8.scope. Jul 10 01:08:26.893000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.893000 audit[2883]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fa3c5d74d58 items=0 ppid=2623 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:26.901538 kernel: audit: type=1400 audit(1752109706.893:1007): avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.901587 kernel: audit: type=1300 audit(1752109706.893:1007): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7fa3c5d74d58 items=0 ppid=2623 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:26.893000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431303536323536353963323331386364636136373664653464343039 Jul 10 01:08:26.905118 kernel: audit: type=1327 audit(1752109706.893:1007): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431303536323536353963323331386364636136373664653464343039 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.908065 kernel: audit: type=1400 audit(1752109706.896:1008): avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.896000 audit: BPF prog-id=133 op=LOAD Jul 10 01:08:26.896000 audit[2883]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c000302228 items=0 ppid=2623 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:26.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431303536323536353963323331386364636136373664653464343039 Jul 10 01:08:26.900000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.900000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.900000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.900000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.900000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.900000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.900000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.900000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.900000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.900000 audit: BPF prog-id=134 op=LOAD Jul 10 01:08:26.900000 audit[2883]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c000302278 items=0 ppid=2623 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:26.900000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431303536323536353963323331386364636136373664653464343039 Jul 10 01:08:26.907000 audit: BPF prog-id=134 op=UNLOAD Jul 10 01:08:26.907000 audit: BPF prog-id=133 op=UNLOAD Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { perfmon } for pid=2883 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit[2883]: AVC avc: denied { bpf } for pid=2883 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:26.907000 audit: BPF prog-id=135 op=LOAD Jul 10 01:08:26.907000 audit[2883]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c000302308 items=0 ppid=2623 pid=2883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:26.907000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431303536323536353963323331386364636136373664653464343039 Jul 10 01:08:26.979544 env[1271]: time="2025-07-10T01:08:26.979513964Z" level=info msg="StartContainer for \"d105625659c2318cdca676de4d40901569e75b1b484a9451d6c4d2b965655dd8\" returns successfully" Jul 10 01:08:27.341000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:27.341000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00485b9e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:08:27.341000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:27.341000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:27.341000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00889d020 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:08:27.341000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:27.341000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:27.341000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c008bd1830 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:08:27.341000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:27.364000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:27.364000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=68 a1=c00889d380 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:08:27.364000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:27.373000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:27.373000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c00889d410 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:08:27.373000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:27.373000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:27.373000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00485ba20 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:08:27.373000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:08:27.830373 systemd[1]: run-containerd-runc-k8s.io-d105625659c2318cdca676de4d40901569e75b1b484a9451d6c4d2b965655dd8-runc.TnaDiA.mount: Deactivated successfully. Jul 10 01:08:28.524546 kubelet[2155]: E0710 01:08:28.524505 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-5zmkd" podUID="45d2398f-e3d6-4a6c-98e9-53377db422f8" Jul 10 01:08:29.330536 env[1271]: time="2025-07-10T01:08:29.330488392Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 01:08:29.332964 systemd[1]: cri-containerd-d105625659c2318cdca676de4d40901569e75b1b484a9451d6c4d2b965655dd8.scope: Deactivated successfully. Jul 10 01:08:29.335000 audit: BPF prog-id=135 op=UNLOAD Jul 10 01:08:29.343536 kubelet[2155]: I0710 01:08:29.343510 2155 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 10 01:08:29.355772 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d105625659c2318cdca676de4d40901569e75b1b484a9451d6c4d2b965655dd8-rootfs.mount: Deactivated successfully. Jul 10 01:08:29.370511 env[1271]: time="2025-07-10T01:08:29.370478931Z" level=info msg="shim disconnected" id=d105625659c2318cdca676de4d40901569e75b1b484a9451d6c4d2b965655dd8 Jul 10 01:08:29.373445 env[1271]: time="2025-07-10T01:08:29.370591825Z" level=warning msg="cleaning up after shim disconnected" id=d105625659c2318cdca676de4d40901569e75b1b484a9451d6c4d2b965655dd8 namespace=k8s.io Jul 10 01:08:29.373445 env[1271]: time="2025-07-10T01:08:29.370601443Z" level=info msg="cleaning up dead shim" Jul 10 01:08:29.376686 env[1271]: time="2025-07-10T01:08:29.376661042Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:08:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2923 runtime=io.containerd.runc.v2\n" Jul 10 01:08:29.597863 systemd[1]: Created slice kubepods-burstable-pod1ec13fd4_3912_4c69_8f01_81c69b5d4def.slice. Jul 10 01:08:29.616242 systemd[1]: Created slice kubepods-burstable-pod7bc9b954_a61b_4cce_9f51_d15d6378a7d2.slice. Jul 10 01:08:29.628149 systemd[1]: Created slice kubepods-besteffort-pod17a5aa9d_ef26_4724_bbd7_3f4b190c3db1.slice. Jul 10 01:08:29.632927 systemd[1]: Created slice kubepods-besteffort-pod24a2b1bf_d1f6_4493_9b94_b2e4b47ef0d6.slice. Jul 10 01:08:29.639437 systemd[1]: Created slice kubepods-besteffort-pod5ac12914_69e0_4aa4_80ef_d44295a97977.slice. Jul 10 01:08:29.646648 systemd[1]: Created slice kubepods-besteffort-pod1b216b96_a8e0_466c_b036_61e1eca75bd4.slice. Jul 10 01:08:29.650620 systemd[1]: Created slice kubepods-besteffort-pod579e5385_aa98_44e2_be2c_7cc96ffa90c7.slice. Jul 10 01:08:29.653550 systemd[1]: Created slice kubepods-besteffort-podffddb151_9f63_4599_ab77_6531dec85898.slice. Jul 10 01:08:29.672421 env[1271]: time="2025-07-10T01:08:29.672393535Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 01:08:29.755754 kubelet[2155]: I0710 01:08:29.755726 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/579e5385-aa98-44e2-be2c-7cc96ffa90c7-goldmane-key-pair\") pod \"goldmane-768f4c5c69-w6zc4\" (UID: \"579e5385-aa98-44e2-be2c-7cc96ffa90c7\") " pod="calico-system/goldmane-768f4c5c69-w6zc4" Jul 10 01:08:29.755989 kubelet[2155]: I0710 01:08:29.755761 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6-calico-apiserver-certs\") pod \"calico-apiserver-bc9b765d7-h2wtb\" (UID: \"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6\") " pod="calico-apiserver/calico-apiserver-bc9b765d7-h2wtb" Jul 10 01:08:29.755989 kubelet[2155]: I0710 01:08:29.755789 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ffddb151-9f63-4599-ab77-6531dec85898-whisker-ca-bundle\") pod \"whisker-6bfb56c485-p4pwd\" (UID: \"ffddb151-9f63-4599-ab77-6531dec85898\") " pod="calico-system/whisker-6bfb56c485-p4pwd" Jul 10 01:08:29.755989 kubelet[2155]: I0710 01:08:29.755802 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-stlkr\" (UniqueName: \"kubernetes.io/projected/5ac12914-69e0-4aa4-80ef-d44295a97977-kube-api-access-stlkr\") pod \"calico-apiserver-bc9b765d7-d89jt\" (UID: \"5ac12914-69e0-4aa4-80ef-d44295a97977\") " pod="calico-apiserver/calico-apiserver-bc9b765d7-d89jt" Jul 10 01:08:29.755989 kubelet[2155]: I0710 01:08:29.755812 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/17a5aa9d-ef26-4724-bbd7-3f4b190c3db1-tigera-ca-bundle\") pod \"calico-kube-controllers-5bb8b6775d-hjglt\" (UID: \"17a5aa9d-ef26-4724-bbd7-3f4b190c3db1\") " pod="calico-system/calico-kube-controllers-5bb8b6775d-hjglt" Jul 10 01:08:29.755989 kubelet[2155]: I0710 01:08:29.755822 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xpldh\" (UniqueName: \"kubernetes.io/projected/24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6-kube-api-access-xpldh\") pod \"calico-apiserver-bc9b765d7-h2wtb\" (UID: \"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6\") " pod="calico-apiserver/calico-apiserver-bc9b765d7-h2wtb" Jul 10 01:08:29.756100 kubelet[2155]: I0710 01:08:29.755831 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6fm5f\" (UniqueName: \"kubernetes.io/projected/17a5aa9d-ef26-4724-bbd7-3f4b190c3db1-kube-api-access-6fm5f\") pod \"calico-kube-controllers-5bb8b6775d-hjglt\" (UID: \"17a5aa9d-ef26-4724-bbd7-3f4b190c3db1\") " pod="calico-system/calico-kube-controllers-5bb8b6775d-hjglt" Jul 10 01:08:29.756100 kubelet[2155]: I0710 01:08:29.755845 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/7bc9b954-a61b-4cce-9f51-d15d6378a7d2-config-volume\") pod \"coredns-674b8bbfcf-9zr5h\" (UID: \"7bc9b954-a61b-4cce-9f51-d15d6378a7d2\") " pod="kube-system/coredns-674b8bbfcf-9zr5h" Jul 10 01:08:29.756100 kubelet[2155]: I0710 01:08:29.755869 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/579e5385-aa98-44e2-be2c-7cc96ffa90c7-config\") pod \"goldmane-768f4c5c69-w6zc4\" (UID: \"579e5385-aa98-44e2-be2c-7cc96ffa90c7\") " pod="calico-system/goldmane-768f4c5c69-w6zc4" Jul 10 01:08:29.756100 kubelet[2155]: I0710 01:08:29.755879 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ffddb151-9f63-4599-ab77-6531dec85898-whisker-backend-key-pair\") pod \"whisker-6bfb56c485-p4pwd\" (UID: \"ffddb151-9f63-4599-ab77-6531dec85898\") " pod="calico-system/whisker-6bfb56c485-p4pwd" Jul 10 01:08:29.756100 kubelet[2155]: I0710 01:08:29.755888 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/1ec13fd4-3912-4c69-8f01-81c69b5d4def-config-volume\") pod \"coredns-674b8bbfcf-vgp2r\" (UID: \"1ec13fd4-3912-4c69-8f01-81c69b5d4def\") " pod="kube-system/coredns-674b8bbfcf-vgp2r" Jul 10 01:08:29.756201 kubelet[2155]: I0710 01:08:29.755906 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/579e5385-aa98-44e2-be2c-7cc96ffa90c7-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-w6zc4\" (UID: \"579e5385-aa98-44e2-be2c-7cc96ffa90c7\") " pod="calico-system/goldmane-768f4c5c69-w6zc4" Jul 10 01:08:29.756201 kubelet[2155]: I0710 01:08:29.755915 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2s7nb\" (UniqueName: \"kubernetes.io/projected/579e5385-aa98-44e2-be2c-7cc96ffa90c7-kube-api-access-2s7nb\") pod \"goldmane-768f4c5c69-w6zc4\" (UID: \"579e5385-aa98-44e2-be2c-7cc96ffa90c7\") " pod="calico-system/goldmane-768f4c5c69-w6zc4" Jul 10 01:08:29.756201 kubelet[2155]: I0710 01:08:29.755943 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gk8x6\" (UniqueName: \"kubernetes.io/projected/7bc9b954-a61b-4cce-9f51-d15d6378a7d2-kube-api-access-gk8x6\") pod \"coredns-674b8bbfcf-9zr5h\" (UID: \"7bc9b954-a61b-4cce-9f51-d15d6378a7d2\") " pod="kube-system/coredns-674b8bbfcf-9zr5h" Jul 10 01:08:29.756201 kubelet[2155]: I0710 01:08:29.755955 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d965b\" (UniqueName: \"kubernetes.io/projected/ffddb151-9f63-4599-ab77-6531dec85898-kube-api-access-d965b\") pod \"whisker-6bfb56c485-p4pwd\" (UID: \"ffddb151-9f63-4599-ab77-6531dec85898\") " pod="calico-system/whisker-6bfb56c485-p4pwd" Jul 10 01:08:29.756201 kubelet[2155]: I0710 01:08:29.755967 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1b216b96-a8e0-466c-b036-61e1eca75bd4-calico-apiserver-certs\") pod \"calico-apiserver-65cf5b8cbd-zbf79\" (UID: \"1b216b96-a8e0-466c-b036-61e1eca75bd4\") " pod="calico-apiserver/calico-apiserver-65cf5b8cbd-zbf79" Jul 10 01:08:29.756302 kubelet[2155]: I0710 01:08:29.755977 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4qhbt\" (UniqueName: \"kubernetes.io/projected/1b216b96-a8e0-466c-b036-61e1eca75bd4-kube-api-access-4qhbt\") pod \"calico-apiserver-65cf5b8cbd-zbf79\" (UID: \"1b216b96-a8e0-466c-b036-61e1eca75bd4\") " pod="calico-apiserver/calico-apiserver-65cf5b8cbd-zbf79" Jul 10 01:08:29.756302 kubelet[2155]: I0710 01:08:29.755986 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5ac12914-69e0-4aa4-80ef-d44295a97977-calico-apiserver-certs\") pod \"calico-apiserver-bc9b765d7-d89jt\" (UID: \"5ac12914-69e0-4aa4-80ef-d44295a97977\") " pod="calico-apiserver/calico-apiserver-bc9b765d7-d89jt" Jul 10 01:08:29.756302 kubelet[2155]: I0710 01:08:29.755995 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wbjds\" (UniqueName: \"kubernetes.io/projected/1ec13fd4-3912-4c69-8f01-81c69b5d4def-kube-api-access-wbjds\") pod \"coredns-674b8bbfcf-vgp2r\" (UID: \"1ec13fd4-3912-4c69-8f01-81c69b5d4def\") " pod="kube-system/coredns-674b8bbfcf-vgp2r" Jul 10 01:08:29.949915 env[1271]: time="2025-07-10T01:08:29.949326496Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65cf5b8cbd-zbf79,Uid:1b216b96-a8e0-466c-b036-61e1eca75bd4,Namespace:calico-apiserver,Attempt:0,}" Jul 10 01:08:29.959024 env[1271]: time="2025-07-10T01:08:29.958906280Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6bfb56c485-p4pwd,Uid:ffddb151-9f63-4599-ab77-6531dec85898,Namespace:calico-system,Attempt:0,}" Jul 10 01:08:29.964422 env[1271]: time="2025-07-10T01:08:29.964260534Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-w6zc4,Uid:579e5385-aa98-44e2-be2c-7cc96ffa90c7,Namespace:calico-system,Attempt:0,}" Jul 10 01:08:30.206090 env[1271]: time="2025-07-10T01:08:30.205871597Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-vgp2r,Uid:1ec13fd4-3912-4c69-8f01-81c69b5d4def,Namespace:kube-system,Attempt:0,}" Jul 10 01:08:30.227475 env[1271]: time="2025-07-10T01:08:30.227451624Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9zr5h,Uid:7bc9b954-a61b-4cce-9f51-d15d6378a7d2,Namespace:kube-system,Attempt:0,}" Jul 10 01:08:30.232151 env[1271]: time="2025-07-10T01:08:30.232132682Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5bb8b6775d-hjglt,Uid:17a5aa9d-ef26-4724-bbd7-3f4b190c3db1,Namespace:calico-system,Attempt:0,}" Jul 10 01:08:30.237829 env[1271]: time="2025-07-10T01:08:30.237805460Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bc9b765d7-h2wtb,Uid:24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6,Namespace:calico-apiserver,Attempt:0,}" Jul 10 01:08:30.247434 env[1271]: time="2025-07-10T01:08:30.247410640Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bc9b765d7-d89jt,Uid:5ac12914-69e0-4aa4-80ef-d44295a97977,Namespace:calico-apiserver,Attempt:0,}" Jul 10 01:08:30.527959 systemd[1]: Created slice kubepods-besteffort-pod45d2398f_e3d6_4a6c_98e9_53377db422f8.slice. Jul 10 01:08:30.531662 env[1271]: time="2025-07-10T01:08:30.531611814Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5zmkd,Uid:45d2398f-e3d6-4a6c-98e9-53377db422f8,Namespace:calico-system,Attempt:0,}" Jul 10 01:08:30.621017 env[1271]: time="2025-07-10T01:08:30.620957053Z" level=error msg="Failed to destroy network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.622578 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8-shm.mount: Deactivated successfully. Jul 10 01:08:30.624001 env[1271]: time="2025-07-10T01:08:30.623965226Z" level=error msg="encountered an error cleaning up failed sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.624121 env[1271]: time="2025-07-10T01:08:30.624103348Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5zmkd,Uid:45d2398f-e3d6-4a6c-98e9-53377db422f8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.627885 kubelet[2155]: E0710 01:08:30.627795 2155 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.632238 kubelet[2155]: E0710 01:08:30.632176 2155 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5zmkd" Jul 10 01:08:30.635790 kubelet[2155]: E0710 01:08:30.635057 2155 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-5zmkd" Jul 10 01:08:30.635790 kubelet[2155]: E0710 01:08:30.635149 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-5zmkd_calico-system(45d2398f-e3d6-4a6c-98e9-53377db422f8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-5zmkd_calico-system(45d2398f-e3d6-4a6c-98e9-53377db422f8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5zmkd" podUID="45d2398f-e3d6-4a6c-98e9-53377db422f8" Jul 10 01:08:30.649757 env[1271]: time="2025-07-10T01:08:30.649716965Z" level=error msg="Failed to destroy network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.651413 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b-shm.mount: Deactivated successfully. Jul 10 01:08:30.652469 env[1271]: time="2025-07-10T01:08:30.652448312Z" level=error msg="encountered an error cleaning up failed sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.652557 env[1271]: time="2025-07-10T01:08:30.652538624Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6bfb56c485-p4pwd,Uid:ffddb151-9f63-4599-ab77-6531dec85898,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.652865 kubelet[2155]: E0710 01:08:30.652754 2155 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.652865 kubelet[2155]: E0710 01:08:30.652806 2155 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6bfb56c485-p4pwd" Jul 10 01:08:30.652865 kubelet[2155]: E0710 01:08:30.652822 2155 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6bfb56c485-p4pwd" Jul 10 01:08:30.653140 kubelet[2155]: E0710 01:08:30.652934 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6bfb56c485-p4pwd_calico-system(ffddb151-9f63-4599-ab77-6531dec85898)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6bfb56c485-p4pwd_calico-system(ffddb151-9f63-4599-ab77-6531dec85898)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6bfb56c485-p4pwd" podUID="ffddb151-9f63-4599-ab77-6531dec85898" Jul 10 01:08:30.669691 kubelet[2155]: I0710 01:08:30.669373 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:08:30.674352 env[1271]: time="2025-07-10T01:08:30.674298183Z" level=error msg="Failed to destroy network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.674778 env[1271]: time="2025-07-10T01:08:30.674751327Z" level=error msg="encountered an error cleaning up failed sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.674873 env[1271]: time="2025-07-10T01:08:30.674846918Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-vgp2r,Uid:1ec13fd4-3912-4c69-8f01-81c69b5d4def,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.675008 env[1271]: time="2025-07-10T01:08:30.674985007Z" level=error msg="Failed to destroy network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.675340 env[1271]: time="2025-07-10T01:08:30.675296781Z" level=error msg="encountered an error cleaning up failed sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.675422 env[1271]: time="2025-07-10T01:08:30.675405425Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-w6zc4,Uid:579e5385-aa98-44e2-be2c-7cc96ffa90c7,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.676059 kubelet[2155]: I0710 01:08:30.675764 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:08:30.685038 env[1271]: time="2025-07-10T01:08:30.685003247Z" level=error msg="Failed to destroy network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.685414 env[1271]: time="2025-07-10T01:08:30.685392126Z" level=error msg="encountered an error cleaning up failed sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.685510 env[1271]: time="2025-07-10T01:08:30.685492392Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9zr5h,Uid:7bc9b954-a61b-4cce-9f51-d15d6378a7d2,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.687026 kubelet[2155]: E0710 01:08:30.686294 2155 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.687026 kubelet[2155]: E0710 01:08:30.686351 2155 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-vgp2r" Jul 10 01:08:30.687026 kubelet[2155]: E0710 01:08:30.686368 2155 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-vgp2r" Jul 10 01:08:30.688440 kubelet[2155]: E0710 01:08:30.686403 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-vgp2r_kube-system(1ec13fd4-3912-4c69-8f01-81c69b5d4def)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-vgp2r_kube-system(1ec13fd4-3912-4c69-8f01-81c69b5d4def)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-vgp2r" podUID="1ec13fd4-3912-4c69-8f01-81c69b5d4def" Jul 10 01:08:30.688440 kubelet[2155]: E0710 01:08:30.686446 2155 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.688440 kubelet[2155]: E0710 01:08:30.686458 2155 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-w6zc4" Jul 10 01:08:30.689785 kubelet[2155]: E0710 01:08:30.686466 2155 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-w6zc4" Jul 10 01:08:30.689785 kubelet[2155]: E0710 01:08:30.686482 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-w6zc4_calico-system(579e5385-aa98-44e2-be2c-7cc96ffa90c7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-w6zc4_calico-system(579e5385-aa98-44e2-be2c-7cc96ffa90c7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-w6zc4" podUID="579e5385-aa98-44e2-be2c-7cc96ffa90c7" Jul 10 01:08:30.689785 kubelet[2155]: E0710 01:08:30.688657 2155 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.689943 kubelet[2155]: E0710 01:08:30.688680 2155 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-9zr5h" Jul 10 01:08:30.689943 kubelet[2155]: E0710 01:08:30.688692 2155 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-9zr5h" Jul 10 01:08:30.689943 kubelet[2155]: E0710 01:08:30.688714 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-9zr5h_kube-system(7bc9b954-a61b-4cce-9f51-d15d6378a7d2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-9zr5h_kube-system(7bc9b954-a61b-4cce-9f51-d15d6378a7d2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-9zr5h" podUID="7bc9b954-a61b-4cce-9f51-d15d6378a7d2" Jul 10 01:08:30.692370 env[1271]: time="2025-07-10T01:08:30.692344753Z" level=info msg="StopPodSandbox for \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\"" Jul 10 01:08:30.692837 env[1271]: time="2025-07-10T01:08:30.692822286Z" level=info msg="StopPodSandbox for \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\"" Jul 10 01:08:30.703680 env[1271]: time="2025-07-10T01:08:30.703643806Z" level=error msg="Failed to destroy network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.704087 env[1271]: time="2025-07-10T01:08:30.704063361Z" level=error msg="encountered an error cleaning up failed sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.704178 env[1271]: time="2025-07-10T01:08:30.704160013Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65cf5b8cbd-zbf79,Uid:1b216b96-a8e0-466c-b036-61e1eca75bd4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.705732 kubelet[2155]: E0710 01:08:30.704409 2155 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.705732 kubelet[2155]: E0710 01:08:30.704447 2155 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-65cf5b8cbd-zbf79" Jul 10 01:08:30.705732 kubelet[2155]: E0710 01:08:30.704462 2155 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-65cf5b8cbd-zbf79" Jul 10 01:08:30.705880 kubelet[2155]: E0710 01:08:30.704510 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-65cf5b8cbd-zbf79_calico-apiserver(1b216b96-a8e0-466c-b036-61e1eca75bd4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-65cf5b8cbd-zbf79_calico-apiserver(1b216b96-a8e0-466c-b036-61e1eca75bd4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-65cf5b8cbd-zbf79" podUID="1b216b96-a8e0-466c-b036-61e1eca75bd4" Jul 10 01:08:30.718445 env[1271]: time="2025-07-10T01:08:30.718411524Z" level=error msg="Failed to destroy network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.718798 env[1271]: time="2025-07-10T01:08:30.718777096Z" level=error msg="encountered an error cleaning up failed sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.719020 env[1271]: time="2025-07-10T01:08:30.718994941Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5bb8b6775d-hjglt,Uid:17a5aa9d-ef26-4724-bbd7-3f4b190c3db1,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.720737 kubelet[2155]: E0710 01:08:30.719224 2155 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.720737 kubelet[2155]: E0710 01:08:30.719271 2155 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5bb8b6775d-hjglt" Jul 10 01:08:30.720737 kubelet[2155]: E0710 01:08:30.719286 2155 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-5bb8b6775d-hjglt" Jul 10 01:08:30.720886 env[1271]: time="2025-07-10T01:08:30.720421434Z" level=error msg="Failed to destroy network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.720886 env[1271]: time="2025-07-10T01:08:30.720637948Z" level=error msg="encountered an error cleaning up failed sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.720886 env[1271]: time="2025-07-10T01:08:30.720667389Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bc9b765d7-d89jt,Uid:5ac12914-69e0-4aa4-80ef-d44295a97977,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.721136 kubelet[2155]: E0710 01:08:30.719346 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-5bb8b6775d-hjglt_calico-system(17a5aa9d-ef26-4724-bbd7-3f4b190c3db1)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-5bb8b6775d-hjglt_calico-system(17a5aa9d-ef26-4724-bbd7-3f4b190c3db1)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5bb8b6775d-hjglt" podUID="17a5aa9d-ef26-4724-bbd7-3f4b190c3db1" Jul 10 01:08:30.721136 kubelet[2155]: E0710 01:08:30.720762 2155 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.721136 kubelet[2155]: E0710 01:08:30.720788 2155 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-bc9b765d7-d89jt" Jul 10 01:08:30.721681 kubelet[2155]: E0710 01:08:30.720818 2155 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-bc9b765d7-d89jt" Jul 10 01:08:30.721681 kubelet[2155]: E0710 01:08:30.720844 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-bc9b765d7-d89jt_calico-apiserver(5ac12914-69e0-4aa4-80ef-d44295a97977)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-bc9b765d7-d89jt_calico-apiserver(5ac12914-69e0-4aa4-80ef-d44295a97977)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-bc9b765d7-d89jt" podUID="5ac12914-69e0-4aa4-80ef-d44295a97977" Jul 10 01:08:30.734584 env[1271]: time="2025-07-10T01:08:30.734552929Z" level=error msg="Failed to destroy network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.738894 env[1271]: time="2025-07-10T01:08:30.738850911Z" level=error msg="encountered an error cleaning up failed sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.739043 env[1271]: time="2025-07-10T01:08:30.739021027Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bc9b765d7-h2wtb,Uid:24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.739363 kubelet[2155]: E0710 01:08:30.739306 2155 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.740227 kubelet[2155]: E0710 01:08:30.739450 2155 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-bc9b765d7-h2wtb" Jul 10 01:08:30.740227 kubelet[2155]: E0710 01:08:30.739469 2155 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-bc9b765d7-h2wtb" Jul 10 01:08:30.740227 kubelet[2155]: E0710 01:08:30.739520 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-bc9b765d7-h2wtb_calico-apiserver(24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-bc9b765d7-h2wtb_calico-apiserver(24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-bc9b765d7-h2wtb" podUID="24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6" Jul 10 01:08:30.747601 env[1271]: time="2025-07-10T01:08:30.747552192Z" level=error msg="StopPodSandbox for \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\" failed" error="failed to destroy network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.748014 kubelet[2155]: E0710 01:08:30.747855 2155 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:08:30.748014 kubelet[2155]: E0710 01:08:30.747894 2155 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8"} Jul 10 01:08:30.748014 kubelet[2155]: E0710 01:08:30.747951 2155 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"45d2398f-e3d6-4a6c-98e9-53377db422f8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:08:30.748014 kubelet[2155]: E0710 01:08:30.747969 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"45d2398f-e3d6-4a6c-98e9-53377db422f8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-5zmkd" podUID="45d2398f-e3d6-4a6c-98e9-53377db422f8" Jul 10 01:08:30.755063 env[1271]: time="2025-07-10T01:08:30.755028291Z" level=error msg="StopPodSandbox for \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\" failed" error="failed to destroy network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:30.755193 kubelet[2155]: E0710 01:08:30.755164 2155 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:08:30.755240 kubelet[2155]: E0710 01:08:30.755202 2155 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b"} Jul 10 01:08:30.755240 kubelet[2155]: E0710 01:08:30.755225 2155 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ffddb151-9f63-4599-ab77-6531dec85898\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:08:30.755312 kubelet[2155]: E0710 01:08:30.755241 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ffddb151-9f63-4599-ab77-6531dec85898\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6bfb56c485-p4pwd" podUID="ffddb151-9f63-4599-ab77-6531dec85898" Jul 10 01:08:31.355720 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5-shm.mount: Deactivated successfully. Jul 10 01:08:31.355793 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244-shm.mount: Deactivated successfully. Jul 10 01:08:31.355833 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268-shm.mount: Deactivated successfully. Jul 10 01:08:31.355869 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c-shm.mount: Deactivated successfully. Jul 10 01:08:31.355902 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757-shm.mount: Deactivated successfully. Jul 10 01:08:31.355935 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec-shm.mount: Deactivated successfully. Jul 10 01:08:31.355970 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9-shm.mount: Deactivated successfully. Jul 10 01:08:31.677494 kubelet[2155]: I0710 01:08:31.677426 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:08:31.678460 env[1271]: time="2025-07-10T01:08:31.678436388Z" level=info msg="StopPodSandbox for \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\"" Jul 10 01:08:31.679371 kubelet[2155]: I0710 01:08:31.679358 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:08:31.679650 env[1271]: time="2025-07-10T01:08:31.679635191Z" level=info msg="StopPodSandbox for \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\"" Jul 10 01:08:31.680149 kubelet[2155]: I0710 01:08:31.680136 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:08:31.680382 env[1271]: time="2025-07-10T01:08:31.680362910Z" level=info msg="StopPodSandbox for \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\"" Jul 10 01:08:31.681158 kubelet[2155]: I0710 01:08:31.681121 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:08:31.681485 env[1271]: time="2025-07-10T01:08:31.681466513Z" level=info msg="StopPodSandbox for \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\"" Jul 10 01:08:31.681781 kubelet[2155]: I0710 01:08:31.681769 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:08:31.682008 env[1271]: time="2025-07-10T01:08:31.681995152Z" level=info msg="StopPodSandbox for \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\"" Jul 10 01:08:31.682580 kubelet[2155]: I0710 01:08:31.682569 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:08:31.682790 env[1271]: time="2025-07-10T01:08:31.682777435Z" level=info msg="StopPodSandbox for \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\"" Jul 10 01:08:31.684700 kubelet[2155]: I0710 01:08:31.684684 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:08:31.684975 env[1271]: time="2025-07-10T01:08:31.684953169Z" level=info msg="StopPodSandbox for \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\"" Jul 10 01:08:31.712697 env[1271]: time="2025-07-10T01:08:31.712655422Z" level=error msg="StopPodSandbox for \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\" failed" error="failed to destroy network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:31.718726 kubelet[2155]: E0710 01:08:31.712791 2155 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:08:31.718726 kubelet[2155]: E0710 01:08:31.712825 2155 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5"} Jul 10 01:08:31.718726 kubelet[2155]: E0710 01:08:31.712850 2155 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5ac12914-69e0-4aa4-80ef-d44295a97977\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:08:31.718726 kubelet[2155]: E0710 01:08:31.712866 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5ac12914-69e0-4aa4-80ef-d44295a97977\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-bc9b765d7-d89jt" podUID="5ac12914-69e0-4aa4-80ef-d44295a97977" Jul 10 01:08:31.742717 env[1271]: time="2025-07-10T01:08:31.742677408Z" level=error msg="StopPodSandbox for \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\" failed" error="failed to destroy network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:31.742859 kubelet[2155]: E0710 01:08:31.742834 2155 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:08:31.742940 kubelet[2155]: E0710 01:08:31.742867 2155 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244"} Jul 10 01:08:31.742940 kubelet[2155]: E0710 01:08:31.742890 2155 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"17a5aa9d-ef26-4724-bbd7-3f4b190c3db1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:08:31.742940 kubelet[2155]: E0710 01:08:31.742904 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"17a5aa9d-ef26-4724-bbd7-3f4b190c3db1\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-5bb8b6775d-hjglt" podUID="17a5aa9d-ef26-4724-bbd7-3f4b190c3db1" Jul 10 01:08:31.750815 kubelet[2155]: E0710 01:08:31.745025 2155 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:08:31.750815 kubelet[2155]: E0710 01:08:31.745041 2155 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c"} Jul 10 01:08:31.750815 kubelet[2155]: E0710 01:08:31.745056 2155 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"7bc9b954-a61b-4cce-9f51-d15d6378a7d2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:08:31.750815 kubelet[2155]: E0710 01:08:31.745070 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"7bc9b954-a61b-4cce-9f51-d15d6378a7d2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-9zr5h" podUID="7bc9b954-a61b-4cce-9f51-d15d6378a7d2" Jul 10 01:08:31.755604 env[1271]: time="2025-07-10T01:08:31.744947911Z" level=error msg="StopPodSandbox for \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\" failed" error="failed to destroy network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:31.755604 env[1271]: time="2025-07-10T01:08:31.745368489Z" level=error msg="StopPodSandbox for \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\" failed" error="failed to destroy network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:31.755604 env[1271]: time="2025-07-10T01:08:31.749214735Z" level=error msg="StopPodSandbox for \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\" failed" error="failed to destroy network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:31.755686 kubelet[2155]: E0710 01:08:31.745434 2155 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:08:31.755686 kubelet[2155]: E0710 01:08:31.745451 2155 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268"} Jul 10 01:08:31.755686 kubelet[2155]: E0710 01:08:31.745463 2155 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:08:31.755686 kubelet[2155]: E0710 01:08:31.745475 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-bc9b765d7-h2wtb" podUID="24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6" Jul 10 01:08:31.755826 kubelet[2155]: E0710 01:08:31.749299 2155 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:08:31.755826 kubelet[2155]: E0710 01:08:31.749316 2155 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9"} Jul 10 01:08:31.755826 kubelet[2155]: E0710 01:08:31.749362 2155 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1b216b96-a8e0-466c-b036-61e1eca75bd4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:08:31.755826 kubelet[2155]: E0710 01:08:31.749379 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1b216b96-a8e0-466c-b036-61e1eca75bd4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-65cf5b8cbd-zbf79" podUID="1b216b96-a8e0-466c-b036-61e1eca75bd4" Jul 10 01:08:31.757244 env[1271]: time="2025-07-10T01:08:31.757200512Z" level=error msg="StopPodSandbox for \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\" failed" error="failed to destroy network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:31.757370 kubelet[2155]: E0710 01:08:31.757346 2155 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:08:31.757411 kubelet[2155]: E0710 01:08:31.757374 2155 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec"} Jul 10 01:08:31.757411 kubelet[2155]: E0710 01:08:31.757393 2155 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"579e5385-aa98-44e2-be2c-7cc96ffa90c7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:08:31.757479 kubelet[2155]: E0710 01:08:31.757407 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"579e5385-aa98-44e2-be2c-7cc96ffa90c7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-w6zc4" podUID="579e5385-aa98-44e2-be2c-7cc96ffa90c7" Jul 10 01:08:31.761752 env[1271]: time="2025-07-10T01:08:31.761727260Z" level=error msg="StopPodSandbox for \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\" failed" error="failed to destroy network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 01:08:31.761877 kubelet[2155]: E0710 01:08:31.761852 2155 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:08:31.761877 kubelet[2155]: E0710 01:08:31.761879 2155 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757"} Jul 10 01:08:31.761942 kubelet[2155]: E0710 01:08:31.761897 2155 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1ec13fd4-3912-4c69-8f01-81c69b5d4def\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 01:08:31.761942 kubelet[2155]: E0710 01:08:31.761909 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1ec13fd4-3912-4c69-8f01-81c69b5d4def\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-vgp2r" podUID="1ec13fd4-3912-4c69-8f01-81c69b5d4def" Jul 10 01:08:32.652905 kernel: kauditd_printk_skb: 58 callbacks suppressed Jul 10 01:08:32.667801 kernel: audit: type=1400 audit(1752109712.641:1020): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:32.667846 kernel: audit: type=1300 audit(1752109712.641:1020): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bcc660 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:32.667868 kernel: audit: type=1327 audit(1752109712.641:1020): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:32.678380 kernel: audit: type=1400 audit(1752109712.647:1021): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:32.678411 kernel: audit: type=1300 audit(1752109712.647:1021): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a736a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:32.678430 kernel: audit: type=1327 audit(1752109712.647:1021): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:32.678445 kernel: audit: type=1400 audit(1752109712.672:1022): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:32.678465 kernel: audit: type=1300 audit(1752109712.672:1022): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a73720 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:32.641000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:32.702845 kernel: audit: type=1327 audit(1752109712.672:1022): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:32.702895 kernel: audit: type=1400 audit(1752109712.672:1023): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:32.641000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bcc660 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:32.641000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:32.647000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:32.647000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000a736a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:32.647000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:32.672000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:32.672000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a73720 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:32.672000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:32.672000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:08:32.672000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a73760 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:08:32.672000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:08:35.178361 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount988127116.mount: Deactivated successfully. Jul 10 01:08:35.215383 env[1271]: time="2025-07-10T01:08:35.215320018Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:35.216492 env[1271]: time="2025-07-10T01:08:35.216472772Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:35.217557 env[1271]: time="2025-07-10T01:08:35.217539303Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:35.218280 env[1271]: time="2025-07-10T01:08:35.218266083Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:35.218733 env[1271]: time="2025-07-10T01:08:35.218718769Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 10 01:08:35.264369 env[1271]: time="2025-07-10T01:08:35.264344266Z" level=info msg="CreateContainer within sandbox \"736c50d427d150c905abb0df2c9a5b5b71c38b533f0530f5df20da0c62070295\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 01:08:35.274318 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2009974210.mount: Deactivated successfully. Jul 10 01:08:35.279509 env[1271]: time="2025-07-10T01:08:35.279486127Z" level=info msg="CreateContainer within sandbox \"736c50d427d150c905abb0df2c9a5b5b71c38b533f0530f5df20da0c62070295\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511\"" Jul 10 01:08:35.284577 env[1271]: time="2025-07-10T01:08:35.284564738Z" level=info msg="StartContainer for \"b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511\"" Jul 10 01:08:35.298856 systemd[1]: Started cri-containerd-b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511.scope. Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7ff59d00bbd8 items=0 ppid=2623 pid=3360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:35.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230313931373036313565363264356439366537623464376337646232 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit: BPF prog-id=136 op=LOAD Jul 10 01:08:35.308000 audit[3360]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000a08b8 items=0 ppid=2623 pid=3360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:35.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230313931373036313565363264356439366537623464376337646232 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.308000 audit: BPF prog-id=137 op=LOAD Jul 10 01:08:35.308000 audit[3360]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000a0908 items=0 ppid=2623 pid=3360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:35.308000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230313931373036313565363264356439366537623464376337646232 Jul 10 01:08:35.309000 audit: BPF prog-id=137 op=UNLOAD Jul 10 01:08:35.309000 audit: BPF prog-id=136 op=UNLOAD Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { perfmon } for pid=3360 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit[3360]: AVC avc: denied { bpf } for pid=3360 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:35.309000 audit: BPF prog-id=138 op=LOAD Jul 10 01:08:35.309000 audit[3360]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000a0998 items=0 ppid=2623 pid=3360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:35.309000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6230313931373036313565363264356439366537623464376337646232 Jul 10 01:08:35.328170 env[1271]: time="2025-07-10T01:08:35.323669732Z" level=info msg="StartContainer for \"b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511\" returns successfully" Jul 10 01:08:35.785007 kubelet[2155]: I0710 01:08:35.781064 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-xxt5q" podStartSLOduration=1.689084715 podStartE2EDuration="17.779167022s" podCreationTimestamp="2025-07-10 01:08:18 +0000 UTC" firstStartedPulling="2025-07-10 01:08:19.129421521 +0000 UTC m=+47.152757314" lastFinishedPulling="2025-07-10 01:08:35.219503828 +0000 UTC m=+63.242839621" observedRunningTime="2025-07-10 01:08:35.770197536 +0000 UTC m=+63.793533340" watchObservedRunningTime="2025-07-10 01:08:35.779167022 +0000 UTC m=+63.802502826" Jul 10 01:08:35.909971 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 01:08:35.910052 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 01:08:36.217896 env[1271]: time="2025-07-10T01:08:36.217866045Z" level=info msg="StopPodSandbox for \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\"" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.316 [INFO][3443] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.317 [INFO][3443] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" iface="eth0" netns="/var/run/netns/cni-917f1e2e-e118-2648-b5ee-497159cdae26" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.317 [INFO][3443] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" iface="eth0" netns="/var/run/netns/cni-917f1e2e-e118-2648-b5ee-497159cdae26" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.320 [INFO][3443] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" iface="eth0" netns="/var/run/netns/cni-917f1e2e-e118-2648-b5ee-497159cdae26" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.320 [INFO][3443] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.320 [INFO][3443] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.644 [INFO][3450] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" HandleID="k8s-pod-network.e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Workload="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.648 [INFO][3450] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.648 [INFO][3450] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.657 [WARNING][3450] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" HandleID="k8s-pod-network.e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Workload="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.657 [INFO][3450] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" HandleID="k8s-pod-network.e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Workload="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.658 [INFO][3450] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:36.661638 env[1271]: 2025-07-10 01:08:36.659 [INFO][3443] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:08:36.664014 systemd[1]: run-netns-cni\x2d917f1e2e\x2de118\x2d2648\x2db5ee\x2d497159cdae26.mount: Deactivated successfully. Jul 10 01:08:36.664731 env[1271]: time="2025-07-10T01:08:36.664706331Z" level=info msg="TearDown network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\" successfully" Jul 10 01:08:36.664812 env[1271]: time="2025-07-10T01:08:36.664799559Z" level=info msg="StopPodSandbox for \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\" returns successfully" Jul 10 01:08:36.733725 systemd[1]: run-containerd-runc-k8s.io-b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511-runc.TsHq2R.mount: Deactivated successfully. Jul 10 01:08:36.828442 kubelet[2155]: I0710 01:08:36.828413 2155 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ffddb151-9f63-4599-ab77-6531dec85898-whisker-ca-bundle\") pod \"ffddb151-9f63-4599-ab77-6531dec85898\" (UID: \"ffddb151-9f63-4599-ab77-6531dec85898\") " Jul 10 01:08:36.828768 kubelet[2155]: I0710 01:08:36.828473 2155 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-d965b\" (UniqueName: \"kubernetes.io/projected/ffddb151-9f63-4599-ab77-6531dec85898-kube-api-access-d965b\") pod \"ffddb151-9f63-4599-ab77-6531dec85898\" (UID: \"ffddb151-9f63-4599-ab77-6531dec85898\") " Jul 10 01:08:36.828768 kubelet[2155]: I0710 01:08:36.828493 2155 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ffddb151-9f63-4599-ab77-6531dec85898-whisker-backend-key-pair\") pod \"ffddb151-9f63-4599-ab77-6531dec85898\" (UID: \"ffddb151-9f63-4599-ab77-6531dec85898\") " Jul 10 01:08:36.942381 kubelet[2155]: I0710 01:08:36.940985 2155 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/ffddb151-9f63-4599-ab77-6531dec85898-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "ffddb151-9f63-4599-ab77-6531dec85898" (UID: "ffddb151-9f63-4599-ab77-6531dec85898"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 10 01:08:36.942534 kubelet[2155]: I0710 01:08:36.939020 2155 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/ffddb151-9f63-4599-ab77-6531dec85898-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "ffddb151-9f63-4599-ab77-6531dec85898" (UID: "ffddb151-9f63-4599-ab77-6531dec85898"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 10 01:08:36.944661 kubelet[2155]: I0710 01:08:36.944641 2155 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/ffddb151-9f63-4599-ab77-6531dec85898-kube-api-access-d965b" (OuterVolumeSpecName: "kube-api-access-d965b") pod "ffddb151-9f63-4599-ab77-6531dec85898" (UID: "ffddb151-9f63-4599-ab77-6531dec85898"). InnerVolumeSpecName "kube-api-access-d965b". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 10 01:08:37.034232 systemd[1]: Removed slice kubepods-besteffort-podffddb151_9f63_4599_ab77_6531dec85898.slice. Jul 10 01:08:37.037998 kubelet[2155]: I0710 01:08:37.037984 2155 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-d965b\" (UniqueName: \"kubernetes.io/projected/ffddb151-9f63-4599-ab77-6531dec85898-kube-api-access-d965b\") on node \"localhost\" DevicePath \"\"" Jul 10 01:08:37.038083 kubelet[2155]: I0710 01:08:37.038074 2155 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/ffddb151-9f63-4599-ab77-6531dec85898-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 01:08:37.038843 kubelet[2155]: I0710 01:08:37.038136 2155 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ffddb151-9f63-4599-ab77-6531dec85898-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 01:08:37.147723 systemd[1]: Created slice kubepods-besteffort-pode23caff0_815e_41ff_b278_0c63358e0e28.slice. Jul 10 01:08:37.177980 systemd[1]: var-lib-kubelet-pods-ffddb151\x2d9f63\x2d4599\x2dab77\x2d6531dec85898-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 01:08:37.178041 systemd[1]: var-lib-kubelet-pods-ffddb151\x2d9f63\x2d4599\x2dab77\x2d6531dec85898-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dd965b.mount: Deactivated successfully. Jul 10 01:08:37.242662 kubelet[2155]: I0710 01:08:37.242568 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/e23caff0-815e-41ff-b278-0c63358e0e28-whisker-backend-key-pair\") pod \"whisker-dc554b84c-jrj8f\" (UID: \"e23caff0-815e-41ff-b278-0c63358e0e28\") " pod="calico-system/whisker-dc554b84c-jrj8f" Jul 10 01:08:37.242662 kubelet[2155]: I0710 01:08:37.242612 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d8r7j\" (UniqueName: \"kubernetes.io/projected/e23caff0-815e-41ff-b278-0c63358e0e28-kube-api-access-d8r7j\") pod \"whisker-dc554b84c-jrj8f\" (UID: \"e23caff0-815e-41ff-b278-0c63358e0e28\") " pod="calico-system/whisker-dc554b84c-jrj8f" Jul 10 01:08:37.242662 kubelet[2155]: I0710 01:08:37.242630 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/e23caff0-815e-41ff-b278-0c63358e0e28-whisker-ca-bundle\") pod \"whisker-dc554b84c-jrj8f\" (UID: \"e23caff0-815e-41ff-b278-0c63358e0e28\") " pod="calico-system/whisker-dc554b84c-jrj8f" Jul 10 01:08:37.466424 env[1271]: time="2025-07-10T01:08:37.466391596Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-dc554b84c-jrj8f,Uid:e23caff0-815e-41ff-b278-0c63358e0e28,Namespace:calico-system,Attempt:0,}" Jul 10 01:08:37.468000 audit[3562]: AVC avc: denied { write } for pid=3562 comm="tee" name="fd" dev="proc" ino=38383 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:08:37.468000 audit[3562]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd6957a7e9 a2=241 a3=1b6 items=1 ppid=3499 pid=3562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.468000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 01:08:37.468000 audit: PATH item=0 name="/dev/fd/63" inode=37676 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:08:37.468000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:08:37.468000 audit[3559]: AVC avc: denied { write } for pid=3559 comm="tee" name="fd" dev="proc" ino=37681 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:08:37.468000 audit[3559]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe5ccc57e9 a2=241 a3=1b6 items=1 ppid=3505 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.468000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 01:08:37.468000 audit: PATH item=0 name="/dev/fd/63" inode=37675 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:08:37.468000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:08:37.469000 audit[3548]: AVC avc: denied { write } for pid=3548 comm="tee" name="fd" dev="proc" ino=37685 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:08:37.469000 audit[3548]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdaa6017ea a2=241 a3=1b6 items=1 ppid=3511 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.469000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 01:08:37.469000 audit: PATH item=0 name="/dev/fd/63" inode=38358 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:08:37.469000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:08:37.488000 audit[3565]: AVC avc: denied { write } for pid=3565 comm="tee" name="fd" dev="proc" ino=37694 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:08:37.488000 audit[3565]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffef71d77da a2=241 a3=1b6 items=1 ppid=3503 pid=3565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.488000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 01:08:37.488000 audit: PATH item=0 name="/dev/fd/63" inode=38377 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:08:37.488000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:08:37.491000 audit[3570]: AVC avc: denied { write } for pid=3570 comm="tee" name="fd" dev="proc" ino=37698 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:08:37.491000 audit[3570]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffebf28a7d9 a2=241 a3=1b6 items=1 ppid=3512 pid=3570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.491000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 01:08:37.491000 audit: PATH item=0 name="/dev/fd/63" inode=38385 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:08:37.491000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:08:37.497000 audit[3573]: AVC avc: denied { write } for pid=3573 comm="tee" name="fd" dev="proc" ino=37704 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:08:37.497000 audit[3573]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffd8c607e9 a2=241 a3=1b6 items=1 ppid=3509 pid=3573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.497000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 01:08:37.497000 audit: PATH item=0 name="/dev/fd/63" inode=38387 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:08:37.497000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:08:37.503000 audit[3567]: AVC avc: denied { write } for pid=3567 comm="tee" name="fd" dev="proc" ino=37708 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 01:08:37.503000 audit[3567]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff1f22b7eb a2=241 a3=1b6 items=1 ppid=3501 pid=3567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.503000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 01:08:37.503000 audit: PATH item=0 name="/dev/fd/63" inode=38380 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 01:08:37.503000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 01:08:37.704354 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 01:08:37.704455 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3c31d80aade: link becomes ready Jul 10 01:08:37.715980 systemd-networkd[1083]: cali3c31d80aade: Link UP Jul 10 01:08:37.716089 systemd-networkd[1083]: cali3c31d80aade: Gained carrier Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.592 [INFO][3578] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.614 [INFO][3578] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--dc554b84c--jrj8f-eth0 whisker-dc554b84c- calico-system e23caff0-815e-41ff-b278-0c63358e0e28 951 0 2025-07-10 01:08:37 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:dc554b84c projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-dc554b84c-jrj8f eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali3c31d80aade [] [] }} ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Namespace="calico-system" Pod="whisker-dc554b84c-jrj8f" WorkloadEndpoint="localhost-k8s-whisker--dc554b84c--jrj8f-" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.614 [INFO][3578] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Namespace="calico-system" Pod="whisker-dc554b84c-jrj8f" WorkloadEndpoint="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.639 [INFO][3593] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" HandleID="k8s-pod-network.49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Workload="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.644 [INFO][3593] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" HandleID="k8s-pod-network.49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Workload="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000250ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-dc554b84c-jrj8f", "timestamp":"2025-07-10 01:08:37.639861131 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.644 [INFO][3593] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.644 [INFO][3593] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.644 [INFO][3593] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.655 [INFO][3593] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" host="localhost" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.669 [INFO][3593] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.674 [INFO][3593] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.675 [INFO][3593] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.676 [INFO][3593] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.676 [INFO][3593] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" host="localhost" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.677 [INFO][3593] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9 Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.679 [INFO][3593] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" host="localhost" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.684 [INFO][3593] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" host="localhost" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.684 [INFO][3593] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" host="localhost" Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.684 [INFO][3593] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:37.732843 env[1271]: 2025-07-10 01:08:37.684 [INFO][3593] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" HandleID="k8s-pod-network.49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Workload="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" Jul 10 01:08:37.733514 env[1271]: 2025-07-10 01:08:37.688 [INFO][3578] cni-plugin/k8s.go 418: Populated endpoint ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Namespace="calico-system" Pod="whisker-dc554b84c-jrj8f" WorkloadEndpoint="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--dc554b84c--jrj8f-eth0", GenerateName:"whisker-dc554b84c-", Namespace:"calico-system", SelfLink:"", UID:"e23caff0-815e-41ff-b278-0c63358e0e28", ResourceVersion:"951", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"dc554b84c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-dc554b84c-jrj8f", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3c31d80aade", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:37.733514 env[1271]: 2025-07-10 01:08:37.688 [INFO][3578] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Namespace="calico-system" Pod="whisker-dc554b84c-jrj8f" WorkloadEndpoint="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" Jul 10 01:08:37.733514 env[1271]: 2025-07-10 01:08:37.688 [INFO][3578] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3c31d80aade ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Namespace="calico-system" Pod="whisker-dc554b84c-jrj8f" WorkloadEndpoint="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" Jul 10 01:08:37.733514 env[1271]: 2025-07-10 01:08:37.706 [INFO][3578] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Namespace="calico-system" Pod="whisker-dc554b84c-jrj8f" WorkloadEndpoint="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" Jul 10 01:08:37.733514 env[1271]: 2025-07-10 01:08:37.707 [INFO][3578] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Namespace="calico-system" Pod="whisker-dc554b84c-jrj8f" WorkloadEndpoint="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--dc554b84c--jrj8f-eth0", GenerateName:"whisker-dc554b84c-", Namespace:"calico-system", SelfLink:"", UID:"e23caff0-815e-41ff-b278-0c63358e0e28", ResourceVersion:"951", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 37, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"dc554b84c", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9", Pod:"whisker-dc554b84c-jrj8f", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3c31d80aade", MAC:"56:56:08:db:ef:27", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:37.733514 env[1271]: 2025-07-10 01:08:37.730 [INFO][3578] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9" Namespace="calico-system" Pod="whisker-dc554b84c-jrj8f" WorkloadEndpoint="localhost-k8s-whisker--dc554b84c--jrj8f-eth0" Jul 10 01:08:37.741511 env[1271]: time="2025-07-10T01:08:37.741458403Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:37.741511 env[1271]: time="2025-07-10T01:08:37.741489491Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:37.742741 env[1271]: time="2025-07-10T01:08:37.741744770Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:37.742741 env[1271]: time="2025-07-10T01:08:37.742587911Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9 pid=3636 runtime=io.containerd.runc.v2 Jul 10 01:08:37.755513 systemd[1]: Started cri-containerd-49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9.scope. Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.788745 kernel: kauditd_printk_skb: 80 callbacks suppressed Jul 10 01:08:37.788790 kernel: audit: type=1400 audit(1752109717.786:1037): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.791172 kernel: audit: type=1400 audit(1752109717.786:1038): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.797491 kernel: audit: type=1400 audit(1752109717.786:1039): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.798496 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.804769 kernel: audit: type=1400 audit(1752109717.786:1040): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.805572 kernel: audit: type=1400 audit(1752109717.786:1041): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.808972 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 01:08:37.809015 kernel: audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 Jul 10 01:08:37.809804 kernel: audit: backlog limit exceeded Jul 10 01:08:37.813873 kernel: audit: type=1400 audit(1752109717.786:1042): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.813900 kernel: audit: type=1400 audit(1752109717.786:1043): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.786000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.786000 audit: BPF prog-id=139 op=LOAD Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439353130623439313333633963336438306461306536656531663865 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439353130623439313333633963336438306461306536656531663865 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit: BPF prog-id=140 op=LOAD Jul 10 01:08:37.793000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003d2160 items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439353130623439313333633963336438306461306536656531663865 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit: BPF prog-id=141 op=LOAD Jul 10 01:08:37.793000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003d21a8 items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439353130623439313333633963336438306461306536656531663865 Jul 10 01:08:37.793000 audit: BPF prog-id=141 op=UNLOAD Jul 10 01:08:37.793000 audit: BPF prog-id=140 op=UNLOAD Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { perfmon } for pid=3647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit[3647]: AVC avc: denied { bpf } for pid=3647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.793000 audit: BPF prog-id=142 op=LOAD Jul 10 01:08:37.793000 audit[3647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003d25b8 items=0 ppid=3636 pid=3647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439353130623439313333633963336438306461306536656531663865 Jul 10 01:08:37.807000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.807000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.807000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.807000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.807000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.807000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.807000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.807000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.807000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.807000 audit[3671]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd85d68100 a2=98 a3=1fffffffffffffff items=0 ppid=3510 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.807000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 01:08:37.815000 audit: BPF prog-id=143 op=UNLOAD Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit: BPF prog-id=144 op=LOAD Jul 10 01:08:37.816000 audit[3671]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd85d67fe0 a2=94 a3=3 items=0 ppid=3510 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.816000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 01:08:37.816000 audit: BPF prog-id=144 op=UNLOAD Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { bpf } for pid=3671 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit: BPF prog-id=145 op=LOAD Jul 10 01:08:37.816000 audit[3671]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd85d68020 a2=94 a3=7ffd85d68200 items=0 ppid=3510 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.816000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 01:08:37.816000 audit: BPF prog-id=145 op=UNLOAD Jul 10 01:08:37.816000 audit[3671]: AVC avc: denied { perfmon } for pid=3671 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.816000 audit[3671]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffd85d680f0 a2=50 a3=a000000085 items=0 ppid=3510 pid=3671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.816000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 01:08:37.817000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.817000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.817000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.817000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.817000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.817000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.817000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.817000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.817000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.817000 audit: BPF prog-id=146 op=LOAD Jul 10 01:08:37.817000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff3e9f6b60 a2=98 a3=3 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.817000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.817000 audit: BPF prog-id=146 op=UNLOAD Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit: BPF prog-id=147 op=LOAD Jul 10 01:08:37.819000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff3e9f6950 a2=94 a3=54428f items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.819000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.819000 audit: BPF prog-id=147 op=UNLOAD Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.819000 audit: BPF prog-id=148 op=LOAD Jul 10 01:08:37.819000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff3e9f6980 a2=94 a3=2 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.819000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.819000 audit: BPF prog-id=148 op=UNLOAD Jul 10 01:08:37.828495 env[1271]: time="2025-07-10T01:08:37.828466542Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-dc554b84c-jrj8f,Uid:e23caff0-815e-41ff-b278-0c63358e0e28,Namespace:calico-system,Attempt:0,} returns sandbox id \"49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9\"" Jul 10 01:08:37.864607 env[1271]: time="2025-07-10T01:08:37.864458936Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit: BPF prog-id=149 op=LOAD Jul 10 01:08:37.898000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff3e9f6840 a2=94 a3=1 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.898000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.898000 audit: BPF prog-id=149 op=UNLOAD Jul 10 01:08:37.898000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.898000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff3e9f6910 a2=50 a3=7fff3e9f69f0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.898000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3e9f6850 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3e9f6880 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3e9f6790 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3e9f68a0 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3e9f6880 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3e9f6870 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3e9f68a0 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3e9f6880 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3e9f68a0 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff3e9f6870 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff3e9f68e0 a2=28 a3=0 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff3e9f6690 a2=50 a3=1 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit: BPF prog-id=150 op=LOAD Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff3e9f6690 a2=94 a3=5 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit: BPF prog-id=150 op=UNLOAD Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff3e9f6740 a2=50 a3=1 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff3e9f6860 a2=4 a3=38 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.906000 audit[3672]: AVC avc: denied { confidentiality } for pid=3672 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:08:37.906000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff3e9f68b0 a2=94 a3=6 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.906000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { confidentiality } for pid=3672 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:08:37.907000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff3e9f6060 a2=94 a3=88 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.907000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { perfmon } for pid=3672 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { bpf } for pid=3672 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.907000 audit[3672]: AVC avc: denied { confidentiality } for pid=3672 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:08:37.907000 audit[3672]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff3e9f6060 a2=94 a3=88 items=0 ppid=3510 pid=3672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.907000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit: BPF prog-id=151 op=LOAD Jul 10 01:08:37.928000 audit[3683]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff4d12c7b0 a2=98 a3=1999999999999999 items=0 ppid=3510 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.928000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 01:08:37.928000 audit: BPF prog-id=151 op=UNLOAD Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.928000 audit: BPF prog-id=152 op=LOAD Jul 10 01:08:37.928000 audit[3683]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff4d12c690 a2=94 a3=ffff items=0 ppid=3510 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.928000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 01:08:37.929000 audit: BPF prog-id=152 op=UNLOAD Jul 10 01:08:37.929000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.929000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.929000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.929000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.929000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.929000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.929000 audit[3683]: AVC avc: denied { perfmon } for pid=3683 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.929000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.929000 audit[3683]: AVC avc: denied { bpf } for pid=3683 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:37.929000 audit: BPF prog-id=153 op=LOAD Jul 10 01:08:37.929000 audit[3683]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff4d12c6d0 a2=94 a3=7fff4d12c8b0 items=0 ppid=3510 pid=3683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:37.929000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 01:08:37.929000 audit: BPF prog-id=153 op=UNLOAD Jul 10 01:08:37.975298 systemd-networkd[1083]: vxlan.calico: Link UP Jul 10 01:08:37.975303 systemd-networkd[1083]: vxlan.calico: Gained carrier Jul 10 01:08:38.007000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.007000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.007000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.007000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.007000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.007000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.007000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.007000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.007000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.007000 audit: BPF prog-id=154 op=LOAD Jul 10 01:08:38.007000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd6a4ef280 a2=98 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.007000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.007000 audit: BPF prog-id=154 op=UNLOAD Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit: BPF prog-id=155 op=LOAD Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd6a4ef090 a2=94 a3=54428f items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit: BPF prog-id=155 op=UNLOAD Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit: BPF prog-id=156 op=LOAD Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd6a4ef0c0 a2=94 a3=2 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit: BPF prog-id=156 op=UNLOAD Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd6a4eef90 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6a4eefc0 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6a4eeed0 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd6a4eefe0 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd6a4eefc0 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd6a4eefb0 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd6a4eefe0 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6a4eefc0 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6a4eefe0 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd6a4eefb0 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffd6a4ef020 a2=28 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.008000 audit: BPF prog-id=157 op=LOAD Jul 10 01:08:38.008000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd6a4eee90 a2=94 a3=0 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.008000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.008000 audit: BPF prog-id=157 op=UNLOAD Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffd6a4eee80 a2=50 a3=2800 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffd6a4eee80 a2=50 a3=2800 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit: BPF prog-id=158 op=LOAD Jul 10 01:08:38.009000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd6a4ee6a0 a2=94 a3=2 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.009000 audit: BPF prog-id=158 op=UNLOAD Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { perfmon } for pid=3709 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit[3709]: AVC avc: denied { bpf } for pid=3709 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.009000 audit: BPF prog-id=159 op=LOAD Jul 10 01:08:38.009000 audit[3709]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd6a4ee7a0 a2=94 a3=30 items=0 ppid=3510 pid=3709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.009000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 01:08:38.011000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.011000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.011000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.011000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.011000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.011000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.011000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.011000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.011000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.011000 audit: BPF prog-id=160 op=LOAD Jul 10 01:08:38.011000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe479ab3f0 a2=98 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.011000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.011000 audit: BPF prog-id=160 op=UNLOAD Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit: BPF prog-id=161 op=LOAD Jul 10 01:08:38.012000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe479ab1e0 a2=94 a3=54428f items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.012000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.012000 audit: BPF prog-id=161 op=UNLOAD Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.012000 audit: BPF prog-id=162 op=LOAD Jul 10 01:08:38.012000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe479ab210 a2=94 a3=2 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.012000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.012000 audit: BPF prog-id=162 op=UNLOAD Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit: BPF prog-id=163 op=LOAD Jul 10 01:08:38.108000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe479ab0d0 a2=94 a3=1 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.108000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.108000 audit: BPF prog-id=163 op=UNLOAD Jul 10 01:08:38.108000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.108000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe479ab1a0 a2=50 a3=7ffe479ab280 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.108000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.115000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.115000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe479ab0e0 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.115000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.115000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.115000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe479ab110 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.115000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.115000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.115000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe479ab020 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.115000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.115000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.115000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe479ab130 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.115000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe479ab110 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe479ab100 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe479ab130 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe479ab110 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe479ab130 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe479ab100 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe479ab170 a2=28 a3=0 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe479aaf20 a2=50 a3=1 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit: BPF prog-id=164 op=LOAD Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe479aaf20 a2=94 a3=5 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit: BPF prog-id=164 op=UNLOAD Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe479aafd0 a2=50 a3=1 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe479ab0f0 a2=4 a3=38 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { confidentiality } for pid=3711 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe479ab140 a2=94 a3=6 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { confidentiality } for pid=3711 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe479aa8f0 a2=94 a3=88 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { perfmon } for pid=3711 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { confidentiality } for pid=3711 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe479aa8f0 a2=94 a3=88 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.116000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.116000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe479ac320 a2=10 a3=f8f00800 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.116000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.117000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.117000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe479ac1c0 a2=10 a3=3 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.117000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.117000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.117000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe479ac160 a2=10 a3=3 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.117000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.117000 audit[3711]: AVC avc: denied { bpf } for pid=3711 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:38.117000 audit[3711]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffe479ac160 a2=10 a3=7 items=0 ppid=3510 pid=3711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.117000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 01:08:38.123000 audit: BPF prog-id=159 op=UNLOAD Jul 10 01:08:38.190000 audit[3743]: NETFILTER_CFG table=raw:99 family=2 entries=21 op=nft_register_chain pid=3743 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:38.190000 audit[3743]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffc6fb74700 a2=0 a3=7ffc6fb746ec items=0 ppid=3510 pid=3743 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.190000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:38.190000 audit[3744]: NETFILTER_CFG table=mangle:100 family=2 entries=16 op=nft_register_chain pid=3744 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:38.190000 audit[3744]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffef1aaba90 a2=0 a3=56222ff76000 items=0 ppid=3510 pid=3744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.190000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:38.201000 audit[3747]: NETFILTER_CFG table=nat:101 family=2 entries=15 op=nft_register_chain pid=3747 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:38.201000 audit[3747]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff59317600 a2=0 a3=7fff593175ec items=0 ppid=3510 pid=3747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.201000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:38.208000 audit[3748]: NETFILTER_CFG table=filter:102 family=2 entries=94 op=nft_register_chain pid=3748 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:38.208000 audit[3748]: SYSCALL arch=c000003e syscall=46 success=yes exit=53116 a0=3 a1=7ffdf6b0edf0 a2=0 a3=7ffdf6b0eddc items=0 ppid=3510 pid=3748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:38.208000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:38.643751 kubelet[2155]: I0710 01:08:38.643690 2155 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="ffddb151-9f63-4599-ab77-6531dec85898" path="/var/lib/kubelet/pods/ffddb151-9f63-4599-ab77-6531dec85898/volumes" Jul 10 01:08:39.054430 systemd-networkd[1083]: cali3c31d80aade: Gained IPv6LL Jul 10 01:08:39.201585 env[1271]: time="2025-07-10T01:08:39.201546762Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:39.202672 env[1271]: time="2025-07-10T01:08:39.202654355Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:39.203765 env[1271]: time="2025-07-10T01:08:39.203746024Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:39.205052 env[1271]: time="2025-07-10T01:08:39.205035669Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:39.205374 env[1271]: time="2025-07-10T01:08:39.205356453Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 10 01:08:39.237269 env[1271]: time="2025-07-10T01:08:39.237236462Z" level=info msg="CreateContainer within sandbox \"49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 01:08:39.243755 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3230033715.mount: Deactivated successfully. Jul 10 01:08:39.246635 env[1271]: time="2025-07-10T01:08:39.246600506Z" level=info msg="CreateContainer within sandbox \"49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"759a36cf6299607e7dc05fd248fc68cd7091705451337fd5d98bed1f8701c46d\"" Jul 10 01:08:39.247219 env[1271]: time="2025-07-10T01:08:39.247182888Z" level=info msg="StartContainer for \"759a36cf6299607e7dc05fd248fc68cd7091705451337fd5d98bed1f8701c46d\"" Jul 10 01:08:39.261413 systemd[1]: Started cri-containerd-759a36cf6299607e7dc05fd248fc68cd7091705451337fd5d98bed1f8701c46d.scope. Jul 10 01:08:39.269157 systemd[1]: run-containerd-runc-k8s.io-759a36cf6299607e7dc05fd248fc68cd7091705451337fd5d98bed1f8701c46d-runc.jbxCxc.mount: Deactivated successfully. Jul 10 01:08:39.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit: BPF prog-id=165 op=LOAD Jul 10 01:08:39.284000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.284000 audit[3767]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3636 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:39.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735396133366366363239393630376537646330356664323438666336 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=3636 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:39.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735396133366366363239393630376537646330356664323438666336 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit: BPF prog-id=166 op=LOAD Jul 10 01:08:39.285000 audit[3767]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0003a4d80 items=0 ppid=3636 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:39.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735396133366366363239393630376537646330356664323438666336 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit: BPF prog-id=167 op=LOAD Jul 10 01:08:39.285000 audit[3767]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0003a4dc8 items=0 ppid=3636 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:39.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735396133366366363239393630376537646330356664323438666336 Jul 10 01:08:39.285000 audit: BPF prog-id=167 op=UNLOAD Jul 10 01:08:39.285000 audit: BPF prog-id=166 op=UNLOAD Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { perfmon } for pid=3767 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit[3767]: AVC avc: denied { bpf } for pid=3767 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:39.285000 audit: BPF prog-id=168 op=LOAD Jul 10 01:08:39.285000 audit[3767]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003a51d8 items=0 ppid=3636 pid=3767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:39.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735396133366366363239393630376537646330356664323438666336 Jul 10 01:08:39.307029 env[1271]: time="2025-07-10T01:08:39.306963715Z" level=info msg="StartContainer for \"759a36cf6299607e7dc05fd248fc68cd7091705451337fd5d98bed1f8701c46d\" returns successfully" Jul 10 01:08:39.309379 env[1271]: time="2025-07-10T01:08:39.309359422Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 01:08:39.351000 audit[3778]: AVC avc: denied { search } for pid=3778 comm="nginx" name="crypto" dev="proc" ino=39210 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c590 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 01:08:39.351000 audit[3778]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f6a4084e728 a2=0 a3=0 items=0 ppid=3636 pid=3778 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c590 key=(null) Jul 10 01:08:39.351000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 01:08:39.950490 systemd-networkd[1083]: vxlan.calico: Gained IPv6LL Jul 10 01:08:41.461906 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2853929469.mount: Deactivated successfully. Jul 10 01:08:41.707193 env[1271]: time="2025-07-10T01:08:41.706919327Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:41.714502 env[1271]: time="2025-07-10T01:08:41.713706713Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:41.716832 env[1271]: time="2025-07-10T01:08:41.716798374Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:41.718592 env[1271]: time="2025-07-10T01:08:41.718562610Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:41.718815 env[1271]: time="2025-07-10T01:08:41.718794604Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 10 01:08:41.742268 env[1271]: time="2025-07-10T01:08:41.742127018Z" level=info msg="CreateContainer within sandbox \"49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 01:08:41.763086 env[1271]: time="2025-07-10T01:08:41.763037253Z" level=info msg="CreateContainer within sandbox \"49510b49133c9c3d80da0e6ee1f8e0ea750fd3daf70e97f03e03c8a9589bcca9\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"055c792219922c44247355010a131ad4d880759a51f61cc63d0089677b3ec5d2\"" Jul 10 01:08:41.766128 env[1271]: time="2025-07-10T01:08:41.766103097Z" level=info msg="StartContainer for \"055c792219922c44247355010a131ad4d880759a51f61cc63d0089677b3ec5d2\"" Jul 10 01:08:41.786884 systemd[1]: Started cri-containerd-055c792219922c44247355010a131ad4d880759a51f61cc63d0089677b3ec5d2.scope. Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.797000 audit: BPF prog-id=169 op=LOAD Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3636 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:41.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035356337393232313939323263343432343733353530313061313331 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=3636 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:41.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035356337393232313939323263343432343733353530313061313331 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit: BPF prog-id=170 op=LOAD Jul 10 01:08:41.798000 audit[3809]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000301640 items=0 ppid=3636 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:41.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035356337393232313939323263343432343733353530313061313331 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.798000 audit: BPF prog-id=171 op=LOAD Jul 10 01:08:41.798000 audit[3809]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000301688 items=0 ppid=3636 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:41.798000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035356337393232313939323263343432343733353530313061313331 Jul 10 01:08:41.799000 audit: BPF prog-id=171 op=UNLOAD Jul 10 01:08:41.799000 audit: BPF prog-id=170 op=UNLOAD Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { perfmon } for pid=3809 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit[3809]: AVC avc: denied { bpf } for pid=3809 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:41.799000 audit: BPF prog-id=172 op=LOAD Jul 10 01:08:41.799000 audit[3809]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000301a98 items=0 ppid=3636 pid=3809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:41.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035356337393232313939323263343432343733353530313061313331 Jul 10 01:08:41.839326 env[1271]: time="2025-07-10T01:08:41.839290803Z" level=info msg="StartContainer for \"055c792219922c44247355010a131ad4d880759a51f61cc63d0089677b3ec5d2\" returns successfully" Jul 10 01:08:41.957676 kubelet[2155]: I0710 01:08:41.950657 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-dc554b84c-jrj8f" podStartSLOduration=1.089929288 podStartE2EDuration="4.947469109s" podCreationTimestamp="2025-07-10 01:08:37 +0000 UTC" firstStartedPulling="2025-07-10 01:08:37.861828357 +0000 UTC m=+65.885164149" lastFinishedPulling="2025-07-10 01:08:41.719368176 +0000 UTC m=+69.742703970" observedRunningTime="2025-07-10 01:08:41.945189887 +0000 UTC m=+69.968525685" watchObservedRunningTime="2025-07-10 01:08:41.947469109 +0000 UTC m=+69.970804906" Jul 10 01:08:42.257000 audit[3839]: NETFILTER_CFG table=filter:103 family=2 entries=19 op=nft_register_rule pid=3839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:42.257000 audit[3839]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe4c543560 a2=0 a3=7ffe4c54354c items=0 ppid=2305 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:42.257000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:42.266000 audit[3839]: NETFILTER_CFG table=nat:104 family=2 entries=21 op=nft_register_chain pid=3839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:42.266000 audit[3839]: SYSCALL arch=c000003e syscall=46 success=yes exit=7044 a0=3 a1=7ffe4c543560 a2=0 a3=7ffe4c54354c items=0 ppid=2305 pid=3839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:42.266000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:42.528988 env[1271]: time="2025-07-10T01:08:42.528734417Z" level=info msg="StopPodSandbox for \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\"" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.920 [INFO][3849] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.929 [INFO][3849] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" iface="eth0" netns="/var/run/netns/cni-6fcf617b-3508-e37e-81d2-002c159a2d67" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.933 [INFO][3849] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" iface="eth0" netns="/var/run/netns/cni-6fcf617b-3508-e37e-81d2-002c159a2d67" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.933 [INFO][3849] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" iface="eth0" netns="/var/run/netns/cni-6fcf617b-3508-e37e-81d2-002c159a2d67" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.933 [INFO][3849] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.933 [INFO][3849] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.991 [INFO][3857] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.993 [INFO][3857] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.993 [INFO][3857] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.999 [WARNING][3857] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:42.999 [INFO][3857] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:43.006 [INFO][3857] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:43.011130 env[1271]: 2025-07-10 01:08:43.008 [INFO][3849] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:08:43.012659 systemd[1]: run-netns-cni\x2d6fcf617b\x2d3508\x2de37e\x2d81d2\x2d002c159a2d67.mount: Deactivated successfully. Jul 10 01:08:43.013529 env[1271]: time="2025-07-10T01:08:43.013497951Z" level=info msg="TearDown network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\" successfully" Jul 10 01:08:43.013567 env[1271]: time="2025-07-10T01:08:43.013527403Z" level=info msg="StopPodSandbox for \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\" returns successfully" Jul 10 01:08:43.100844 env[1271]: time="2025-07-10T01:08:43.100797256Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bc9b765d7-d89jt,Uid:5ac12914-69e0-4aa4-80ef-d44295a97977,Namespace:calico-apiserver,Attempt:1,}" Jul 10 01:08:43.354327 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 01:08:43.355147 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali650abb9dcdc: link becomes ready Jul 10 01:08:43.354043 systemd-networkd[1083]: cali650abb9dcdc: Link UP Jul 10 01:08:43.354239 systemd-networkd[1083]: cali650abb9dcdc: Gained carrier Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.181 [INFO][3864] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0 calico-apiserver-bc9b765d7- calico-apiserver 5ac12914-69e0-4aa4-80ef-d44295a97977 980 0 2025-07-10 01:08:16 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:bc9b765d7 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-bc9b765d7-d89jt eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali650abb9dcdc [] [] }} ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-d89jt" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.182 [INFO][3864] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-d89jt" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.213 [INFO][3876] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.215 [INFO][3876] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad4a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-bc9b765d7-d89jt", "timestamp":"2025-07-10 01:08:43.213743343 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.215 [INFO][3876] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.215 [INFO][3876] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.215 [INFO][3876] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.234 [INFO][3876] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" host="localhost" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.308 [INFO][3876] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.317 [INFO][3876] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.318 [INFO][3876] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.320 [INFO][3876] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.320 [INFO][3876] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" host="localhost" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.322 [INFO][3876] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88 Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.335 [INFO][3876] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" host="localhost" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.341 [INFO][3876] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" host="localhost" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.341 [INFO][3876] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" host="localhost" Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.341 [INFO][3876] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:43.368076 env[1271]: 2025-07-10 01:08:43.341 [INFO][3876] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.368907 env[1271]: 2025-07-10 01:08:43.344 [INFO][3864] cni-plugin/k8s.go 418: Populated endpoint ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-d89jt" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0", GenerateName:"calico-apiserver-bc9b765d7-", Namespace:"calico-apiserver", SelfLink:"", UID:"5ac12914-69e0-4aa4-80ef-d44295a97977", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bc9b765d7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-bc9b765d7-d89jt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali650abb9dcdc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:43.368907 env[1271]: 2025-07-10 01:08:43.344 [INFO][3864] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-d89jt" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.368907 env[1271]: 2025-07-10 01:08:43.344 [INFO][3864] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali650abb9dcdc ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-d89jt" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.368907 env[1271]: 2025-07-10 01:08:43.354 [INFO][3864] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-d89jt" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.368907 env[1271]: 2025-07-10 01:08:43.354 [INFO][3864] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-d89jt" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0", GenerateName:"calico-apiserver-bc9b765d7-", Namespace:"calico-apiserver", SelfLink:"", UID:"5ac12914-69e0-4aa4-80ef-d44295a97977", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bc9b765d7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88", Pod:"calico-apiserver-bc9b765d7-d89jt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali650abb9dcdc", MAC:"be:6a:c4:ad:7e:77", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:43.368907 env[1271]: 2025-07-10 01:08:43.366 [INFO][3864] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-d89jt" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:08:43.378051 env[1271]: time="2025-07-10T01:08:43.378004098Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:43.378193 env[1271]: time="2025-07-10T01:08:43.378174022Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:43.378279 env[1271]: time="2025-07-10T01:08:43.378261198Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:43.378498 env[1271]: time="2025-07-10T01:08:43.378478015Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88 pid=3908 runtime=io.containerd.runc.v2 Jul 10 01:08:43.399000 audit[3929]: NETFILTER_CFG table=filter:105 family=2 entries=50 op=nft_register_chain pid=3929 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:43.392141 systemd[1]: Started cri-containerd-abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88.scope. Jul 10 01:08:43.403000 kernel: kauditd_printk_skb: 694 callbacks suppressed Jul 10 01:08:43.406961 kernel: audit: type=1325 audit(1752109723.399:1196): table=filter:105 family=2 entries=50 op=nft_register_chain pid=3929 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:43.407061 kernel: audit: type=1300 audit(1752109723.399:1196): arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7fffb8fb6990 a2=0 a3=7fffb8fb697c items=0 ppid=3510 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:43.399000 audit[3929]: SYSCALL arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7fffb8fb6990 a2=0 a3=7fffb8fb697c items=0 ppid=3510 pid=3929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:43.399000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:43.409635 kernel: audit: type=1327 audit(1752109723.399:1196): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.431928 kernel: audit: type=1400 audit(1752109723.423:1197): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.431970 kernel: audit: type=1400 audit(1752109723.423:1198): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.432080 kernel: audit: type=1400 audit(1752109723.423:1199): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.432106 kernel: audit: type=1400 audit(1752109723.423:1200): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.434528 kernel: audit: type=1400 audit(1752109723.423:1201): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.434486 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:08:43.441799 kernel: audit: type=1400 audit(1752109723.423:1202): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.441850 kernel: audit: type=1400 audit(1752109723.423:1203): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.423000 audit: BPF prog-id=173 op=LOAD Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:43.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162623134313430316637353761353932366638613938313939343563 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:43.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162623134313430316637353761353932366638613938313939343563 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit: BPF prog-id=174 op=LOAD Jul 10 01:08:43.428000 audit[3919]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003248d0 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:43.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162623134313430316637353761353932366638613938313939343563 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit: BPF prog-id=175 op=LOAD Jul 10 01:08:43.428000 audit[3919]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000324918 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:43.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162623134313430316637353761353932366638613938313939343563 Jul 10 01:08:43.428000 audit: BPF prog-id=175 op=UNLOAD Jul 10 01:08:43.428000 audit: BPF prog-id=174 op=UNLOAD Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { perfmon } for pid=3919 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit[3919]: AVC avc: denied { bpf } for pid=3919 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:43.428000 audit: BPF prog-id=176 op=LOAD Jul 10 01:08:43.428000 audit[3919]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000324d28 items=0 ppid=3908 pid=3919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:43.428000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162623134313430316637353761353932366638613938313939343563 Jul 10 01:08:43.480122 env[1271]: time="2025-07-10T01:08:43.460969698Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bc9b765d7-d89jt,Uid:5ac12914-69e0-4aa4-80ef-d44295a97977,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\"" Jul 10 01:08:43.609273 env[1271]: time="2025-07-10T01:08:43.607372474Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 01:08:44.013036 systemd[1]: run-containerd-runc-k8s.io-abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88-runc.loqCWJ.mount: Deactivated successfully. Jul 10 01:08:44.703301 env[1271]: time="2025-07-10T01:08:44.703082173Z" level=info msg="StopPodSandbox for \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\"" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.800 [INFO][3953] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.800 [INFO][3953] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" iface="eth0" netns="/var/run/netns/cni-f683cd70-1df1-d2af-ae11-2b7ea969f9d6" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.800 [INFO][3953] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" iface="eth0" netns="/var/run/netns/cni-f683cd70-1df1-d2af-ae11-2b7ea969f9d6" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.800 [INFO][3953] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" iface="eth0" netns="/var/run/netns/cni-f683cd70-1df1-d2af-ae11-2b7ea969f9d6" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.801 [INFO][3953] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.801 [INFO][3953] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.832 [INFO][3960] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" HandleID="k8s-pod-network.bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.832 [INFO][3960] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.832 [INFO][3960] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.836 [WARNING][3960] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" HandleID="k8s-pod-network.bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.836 [INFO][3960] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" HandleID="k8s-pod-network.bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.837 [INFO][3960] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:44.840363 env[1271]: 2025-07-10 01:08:44.839 [INFO][3953] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:08:44.866141 env[1271]: time="2025-07-10T01:08:44.842074127Z" level=info msg="TearDown network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\" successfully" Jul 10 01:08:44.866141 env[1271]: time="2025-07-10T01:08:44.842096854Z" level=info msg="StopPodSandbox for \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\" returns successfully" Jul 10 01:08:44.866141 env[1271]: time="2025-07-10T01:08:44.850136765Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5zmkd,Uid:45d2398f-e3d6-4a6c-98e9-53377db422f8,Namespace:calico-system,Attempt:1,}" Jul 10 01:08:44.841979 systemd[1]: run-netns-cni\x2df683cd70\x2d1df1\x2dd2af\x2dae11\x2d2b7ea969f9d6.mount: Deactivated successfully. Jul 10 01:08:45.006246 systemd-networkd[1083]: cali456fefa2075: Link UP Jul 10 01:08:45.008808 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 01:08:45.008845 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali456fefa2075: link becomes ready Jul 10 01:08:45.009631 systemd-networkd[1083]: cali456fefa2075: Gained carrier Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.949 [INFO][3966] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--5zmkd-eth0 csi-node-driver- calico-system 45d2398f-e3d6-4a6c-98e9-53377db422f8 992 0 2025-07-10 01:08:19 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-5zmkd eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali456fefa2075 [] [] }} ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Namespace="calico-system" Pod="csi-node-driver-5zmkd" WorkloadEndpoint="localhost-k8s-csi--node--driver--5zmkd-" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.949 [INFO][3966] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Namespace="calico-system" Pod="csi-node-driver-5zmkd" WorkloadEndpoint="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.970 [INFO][3980] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" HandleID="k8s-pod-network.00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.971 [INFO][3980] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" HandleID="k8s-pod-network.00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-5zmkd", "timestamp":"2025-07-10 01:08:44.970966054 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.971 [INFO][3980] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.971 [INFO][3980] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.971 [INFO][3980] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.979 [INFO][3980] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" host="localhost" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.982 [INFO][3980] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.985 [INFO][3980] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.986 [INFO][3980] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.992 [INFO][3980] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.992 [INFO][3980] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" host="localhost" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.993 [INFO][3980] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430 Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:44.996 [INFO][3980] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" host="localhost" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:45.003 [INFO][3980] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" host="localhost" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:45.003 [INFO][3980] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" host="localhost" Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:45.003 [INFO][3980] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:45.068622 env[1271]: 2025-07-10 01:08:45.003 [INFO][3980] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" HandleID="k8s-pod-network.00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:45.069114 env[1271]: 2025-07-10 01:08:45.004 [INFO][3966] cni-plugin/k8s.go 418: Populated endpoint ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Namespace="calico-system" Pod="csi-node-driver-5zmkd" WorkloadEndpoint="localhost-k8s-csi--node--driver--5zmkd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--5zmkd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"45d2398f-e3d6-4a6c-98e9-53377db422f8", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-5zmkd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali456fefa2075", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:45.069114 env[1271]: 2025-07-10 01:08:45.005 [INFO][3966] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Namespace="calico-system" Pod="csi-node-driver-5zmkd" WorkloadEndpoint="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:45.069114 env[1271]: 2025-07-10 01:08:45.005 [INFO][3966] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali456fefa2075 ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Namespace="calico-system" Pod="csi-node-driver-5zmkd" WorkloadEndpoint="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:45.069114 env[1271]: 2025-07-10 01:08:45.009 [INFO][3966] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Namespace="calico-system" Pod="csi-node-driver-5zmkd" WorkloadEndpoint="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:45.069114 env[1271]: 2025-07-10 01:08:45.009 [INFO][3966] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Namespace="calico-system" Pod="csi-node-driver-5zmkd" WorkloadEndpoint="localhost-k8s-csi--node--driver--5zmkd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--5zmkd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"45d2398f-e3d6-4a6c-98e9-53377db422f8", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430", Pod:"csi-node-driver-5zmkd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali456fefa2075", MAC:"f6:bc:80:ea:9b:f9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:45.069114 env[1271]: 2025-07-10 01:08:45.066 [INFO][3966] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430" Namespace="calico-system" Pod="csi-node-driver-5zmkd" WorkloadEndpoint="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:08:45.082826 env[1271]: time="2025-07-10T01:08:45.082786462Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:45.082941 env[1271]: time="2025-07-10T01:08:45.082821355Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:45.082941 env[1271]: time="2025-07-10T01:08:45.082830995Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:45.083072 env[1271]: time="2025-07-10T01:08:45.083052351Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430 pid=4001 runtime=io.containerd.runc.v2 Jul 10 01:08:45.105690 systemd[1]: Started cri-containerd-00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430.scope. Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.112000 audit: BPF prog-id=177 op=LOAD Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4001 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:45.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030636661343436633833373931313262326264663034326262346264 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4001 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:45.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030636661343436633833373931313262326264663034326262346264 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit: BPF prog-id=178 op=LOAD Jul 10 01:08:45.113000 audit[4011]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002cfff0 items=0 ppid=4001 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:45.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030636661343436633833373931313262326264663034326262346264 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit: BPF prog-id=179 op=LOAD Jul 10 01:08:45.113000 audit[4011]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000332038 items=0 ppid=4001 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:45.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030636661343436633833373931313262326264663034326262346264 Jul 10 01:08:45.113000 audit: BPF prog-id=179 op=UNLOAD Jul 10 01:08:45.113000 audit: BPF prog-id=178 op=UNLOAD Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { perfmon } for pid=4011 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit[4011]: AVC avc: denied { bpf } for pid=4011 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:45.113000 audit: BPF prog-id=180 op=LOAD Jul 10 01:08:45.113000 audit[4011]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000332448 items=0 ppid=4001 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:45.113000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3030636661343436633833373931313262326264663034326262346264 Jul 10 01:08:45.114657 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:08:45.127428 env[1271]: time="2025-07-10T01:08:45.127401749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-5zmkd,Uid:45d2398f-e3d6-4a6c-98e9-53377db422f8,Namespace:calico-system,Attempt:1,} returns sandbox id \"00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430\"" Jul 10 01:08:45.134512 systemd-networkd[1083]: cali650abb9dcdc: Gained IPv6LL Jul 10 01:08:45.142000 audit[4034]: NETFILTER_CFG table=filter:106 family=2 entries=40 op=nft_register_chain pid=4034 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:45.142000 audit[4034]: SYSCALL arch=c000003e syscall=46 success=yes exit=20764 a0=3 a1=7fff23167c00 a2=0 a3=7fff23167bec items=0 ppid=3510 pid=4034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:45.142000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:45.525812 env[1271]: time="2025-07-10T01:08:45.525777151Z" level=info msg="StopPodSandbox for \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\"" Jul 10 01:08:45.526023 env[1271]: time="2025-07-10T01:08:45.526006802Z" level=info msg="StopPodSandbox for \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\"" Jul 10 01:08:45.526376 env[1271]: time="2025-07-10T01:08:45.525788330Z" level=info msg="StopPodSandbox for \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\"" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.591 [INFO][4057] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.591 [INFO][4057] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" iface="eth0" netns="/var/run/netns/cni-93e624fd-5dfa-779e-46fc-1924e19a45b0" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.591 [INFO][4057] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" iface="eth0" netns="/var/run/netns/cni-93e624fd-5dfa-779e-46fc-1924e19a45b0" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.592 [INFO][4057] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" iface="eth0" netns="/var/run/netns/cni-93e624fd-5dfa-779e-46fc-1924e19a45b0" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.592 [INFO][4057] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.592 [INFO][4057] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.614 [INFO][4085] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" HandleID="k8s-pod-network.b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.614 [INFO][4085] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.614 [INFO][4085] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.637 [WARNING][4085] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" HandleID="k8s-pod-network.b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.637 [INFO][4085] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" HandleID="k8s-pod-network.b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.655 [INFO][4085] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:45.660956 env[1271]: 2025-07-10 01:08:45.659 [INFO][4057] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:08:45.674691 env[1271]: time="2025-07-10T01:08:45.661251700Z" level=info msg="TearDown network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\" successfully" Jul 10 01:08:45.674691 env[1271]: time="2025-07-10T01:08:45.661279001Z" level=info msg="StopPodSandbox for \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\" returns successfully" Jul 10 01:08:45.662902 systemd[1]: run-netns-cni\x2d93e624fd\x2d5dfa\x2d779e\x2d46fc\x2d1924e19a45b0.mount: Deactivated successfully. Jul 10 01:08:45.682364 env[1271]: time="2025-07-10T01:08:45.682343068Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bc9b765d7-h2wtb,Uid:24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6,Namespace:calico-apiserver,Attempt:1,}" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.650 [INFO][4070] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.650 [INFO][4070] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" iface="eth0" netns="/var/run/netns/cni-3aecf80e-d161-d09f-194f-8ae0392c2cc7" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.650 [INFO][4070] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" iface="eth0" netns="/var/run/netns/cni-3aecf80e-d161-d09f-194f-8ae0392c2cc7" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.650 [INFO][4070] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" iface="eth0" netns="/var/run/netns/cni-3aecf80e-d161-d09f-194f-8ae0392c2cc7" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.650 [INFO][4070] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.650 [INFO][4070] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.705 [INFO][4092] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" HandleID="k8s-pod-network.77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.705 [INFO][4092] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.705 [INFO][4092] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.713 [WARNING][4092] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" HandleID="k8s-pod-network.77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.713 [INFO][4092] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" HandleID="k8s-pod-network.77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.715 [INFO][4092] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:45.724516 env[1271]: 2025-07-10 01:08:45.722 [INFO][4070] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:08:45.729653 env[1271]: time="2025-07-10T01:08:45.727492095Z" level=info msg="TearDown network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\" successfully" Jul 10 01:08:45.729653 env[1271]: time="2025-07-10T01:08:45.727523801Z" level=info msg="StopPodSandbox for \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\" returns successfully" Jul 10 01:08:45.728121 systemd[1]: run-netns-cni\x2d3aecf80e\x2dd161\x2dd09f\x2d194f\x2d8ae0392c2cc7.mount: Deactivated successfully. Jul 10 01:08:45.729836 env[1271]: time="2025-07-10T01:08:45.729754206Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65cf5b8cbd-zbf79,Uid:1b216b96-a8e0-466c-b036-61e1eca75bd4,Namespace:calico-apiserver,Attempt:1,}" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.655 [INFO][4069] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.656 [INFO][4069] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" iface="eth0" netns="/var/run/netns/cni-cdf814e4-1088-96d9-041e-c791f14c8f08" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.656 [INFO][4069] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" iface="eth0" netns="/var/run/netns/cni-cdf814e4-1088-96d9-041e-c791f14c8f08" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.657 [INFO][4069] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" iface="eth0" netns="/var/run/netns/cni-cdf814e4-1088-96d9-041e-c791f14c8f08" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.657 [INFO][4069] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.657 [INFO][4069] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.715 [INFO][4097] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" HandleID="k8s-pod-network.cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.716 [INFO][4097] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.716 [INFO][4097] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.732 [WARNING][4097] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" HandleID="k8s-pod-network.cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.732 [INFO][4097] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" HandleID="k8s-pod-network.cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.736 [INFO][4097] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:45.743675 env[1271]: 2025-07-10 01:08:45.740 [INFO][4069] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:08:45.748319 env[1271]: time="2025-07-10T01:08:45.743865272Z" level=info msg="TearDown network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\" successfully" Jul 10 01:08:45.748319 env[1271]: time="2025-07-10T01:08:45.743885221Z" level=info msg="StopPodSandbox for \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\" returns successfully" Jul 10 01:08:45.748319 env[1271]: time="2025-07-10T01:08:45.744406667Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5bb8b6775d-hjglt,Uid:17a5aa9d-ef26-4724-bbd7-3f4b190c3db1,Namespace:calico-system,Attempt:1,}" Jul 10 01:08:46.068942 systemd-networkd[1083]: cali10a52582a39: Link UP Jul 10 01:08:46.090032 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 01:08:46.090083 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali10a52582a39: link becomes ready Jul 10 01:08:46.071018 systemd-networkd[1083]: cali10a52582a39: Gained carrier Jul 10 01:08:46.089235 systemd[1]: run-netns-cni\x2dcdf814e4\x2d1088\x2d96d9\x2d041e\x2dc791f14c8f08.mount: Deactivated successfully. Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.844 [INFO][4106] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0 calico-apiserver-bc9b765d7- calico-apiserver 24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6 1001 0 2025-07-10 01:08:16 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:bc9b765d7 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-bc9b765d7-h2wtb eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali10a52582a39 [] [] }} ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-h2wtb" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.845 [INFO][4106] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-h2wtb" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.907 [INFO][4127] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" HandleID="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.907 [INFO][4127] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" HandleID="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccff0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-bc9b765d7-h2wtb", "timestamp":"2025-07-10 01:08:45.907066273 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.907 [INFO][4127] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.907 [INFO][4127] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.907 [INFO][4127] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.912 [INFO][4127] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" host="localhost" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.914 [INFO][4127] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.919 [INFO][4127] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.921 [INFO][4127] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.922 [INFO][4127] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.922 [INFO][4127] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" host="localhost" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.923 [INFO][4127] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:45.944 [INFO][4127] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" host="localhost" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:46.062 [INFO][4127] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" host="localhost" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:46.062 [INFO][4127] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" host="localhost" Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:46.062 [INFO][4127] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:46.100003 env[1271]: 2025-07-10 01:08:46.062 [INFO][4127] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" HandleID="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:46.100636 env[1271]: 2025-07-10 01:08:46.064 [INFO][4106] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-h2wtb" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0", GenerateName:"calico-apiserver-bc9b765d7-", Namespace:"calico-apiserver", SelfLink:"", UID:"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bc9b765d7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-bc9b765d7-h2wtb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali10a52582a39", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:46.100636 env[1271]: 2025-07-10 01:08:46.064 [INFO][4106] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-h2wtb" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:46.100636 env[1271]: 2025-07-10 01:08:46.065 [INFO][4106] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali10a52582a39 ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-h2wtb" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:46.100636 env[1271]: 2025-07-10 01:08:46.071 [INFO][4106] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-h2wtb" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:46.100636 env[1271]: 2025-07-10 01:08:46.071 [INFO][4106] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-h2wtb" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0", GenerateName:"calico-apiserver-bc9b765d7-", Namespace:"calico-apiserver", SelfLink:"", UID:"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bc9b765d7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d", Pod:"calico-apiserver-bc9b765d7-h2wtb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali10a52582a39", MAC:"9a:11:2d:1f:5d:4b", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:46.100636 env[1271]: 2025-07-10 01:08:46.091 [INFO][4106] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Namespace="calico-apiserver" Pod="calico-apiserver-bc9b765d7-h2wtb" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:08:46.146820 systemd-networkd[1083]: cali5c94aadfcdc: Link UP Jul 10 01:08:46.148045 systemd-networkd[1083]: cali5c94aadfcdc: Gained carrier Jul 10 01:08:46.148879 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali5c94aadfcdc: link becomes ready Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:45.914 [INFO][4117] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0 calico-apiserver-65cf5b8cbd- calico-apiserver 1b216b96-a8e0-466c-b036-61e1eca75bd4 1002 0 2025-07-10 01:08:17 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:65cf5b8cbd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-65cf5b8cbd-zbf79 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali5c94aadfcdc [] [] }} ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-zbf79" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:45.914 [INFO][4117] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-zbf79" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.010 [INFO][4146] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" HandleID="k8s-pod-network.1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.010 [INFO][4146] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" HandleID="k8s-pod-network.1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cdcd0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-65cf5b8cbd-zbf79", "timestamp":"2025-07-10 01:08:46.010153188 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.010 [INFO][4146] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.063 [INFO][4146] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.063 [INFO][4146] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.075 [INFO][4146] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" host="localhost" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.094 [INFO][4146] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.099 [INFO][4146] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.100 [INFO][4146] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.102 [INFO][4146] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.102 [INFO][4146] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" host="localhost" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.103 [INFO][4146] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48 Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.123 [INFO][4146] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" host="localhost" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.142 [INFO][4146] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" host="localhost" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.142 [INFO][4146] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" host="localhost" Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.142 [INFO][4146] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:46.173529 env[1271]: 2025-07-10 01:08:46.142 [INFO][4146] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" HandleID="k8s-pod-network.1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:46.205241 env[1271]: 2025-07-10 01:08:46.143 [INFO][4117] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-zbf79" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0", GenerateName:"calico-apiserver-65cf5b8cbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b216b96-a8e0-466c-b036-61e1eca75bd4", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65cf5b8cbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-65cf5b8cbd-zbf79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5c94aadfcdc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:46.205241 env[1271]: 2025-07-10 01:08:46.143 [INFO][4117] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-zbf79" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:46.205241 env[1271]: 2025-07-10 01:08:46.143 [INFO][4117] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali5c94aadfcdc ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-zbf79" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:46.205241 env[1271]: 2025-07-10 01:08:46.148 [INFO][4117] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-zbf79" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:46.205241 env[1271]: 2025-07-10 01:08:46.148 [INFO][4117] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-zbf79" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0", GenerateName:"calico-apiserver-65cf5b8cbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b216b96-a8e0-466c-b036-61e1eca75bd4", ResourceVersion:"1002", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65cf5b8cbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48", Pod:"calico-apiserver-65cf5b8cbd-zbf79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5c94aadfcdc", MAC:"fa:72:37:fc:c6:f3", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:46.205241 env[1271]: 2025-07-10 01:08:46.172 [INFO][4117] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-zbf79" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:08:46.230353 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali935173db813: link becomes ready Jul 10 01:08:46.231117 systemd-networkd[1083]: cali935173db813: Link UP Jul 10 01:08:46.231230 systemd-networkd[1083]: cali935173db813: Gained carrier Jul 10 01:08:46.237049 env[1271]: time="2025-07-10T01:08:46.236758494Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:46.237049 env[1271]: time="2025-07-10T01:08:46.236781888Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:46.237049 env[1271]: time="2025-07-10T01:08:46.236788843Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:46.237049 env[1271]: time="2025-07-10T01:08:46.236869123Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d pid=4184 runtime=io.containerd.runc.v2 Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:45.947 [INFO][4133] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0 calico-kube-controllers-5bb8b6775d- calico-system 17a5aa9d-ef26-4724-bbd7-3f4b190c3db1 1003 0 2025-07-10 01:08:19 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:5bb8b6775d projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-5bb8b6775d-hjglt eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali935173db813 [] [] }} ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Namespace="calico-system" Pod="calico-kube-controllers-5bb8b6775d-hjglt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:45.947 [INFO][4133] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Namespace="calico-system" Pod="calico-kube-controllers-5bb8b6775d-hjglt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.026 [INFO][4150] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" HandleID="k8s-pod-network.05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.026 [INFO][4150] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" HandleID="k8s-pod-network.05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cdaf0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-5bb8b6775d-hjglt", "timestamp":"2025-07-10 01:08:46.026178939 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.026 [INFO][4150] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.142 [INFO][4150] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.142 [INFO][4150] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.176 [INFO][4150] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" host="localhost" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.192 [INFO][4150] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.199 [INFO][4150] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.200 [INFO][4150] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.201 [INFO][4150] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.201 [INFO][4150] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" host="localhost" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.202 [INFO][4150] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320 Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.216 [INFO][4150] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" host="localhost" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.226 [INFO][4150] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" host="localhost" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.226 [INFO][4150] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" host="localhost" Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.226 [INFO][4150] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:46.244526 env[1271]: 2025-07-10 01:08:46.226 [INFO][4150] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" HandleID="k8s-pod-network.05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:46.249778 env[1271]: 2025-07-10 01:08:46.227 [INFO][4133] cni-plugin/k8s.go 418: Populated endpoint ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Namespace="calico-system" Pod="calico-kube-controllers-5bb8b6775d-hjglt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0", GenerateName:"calico-kube-controllers-5bb8b6775d-", Namespace:"calico-system", SelfLink:"", UID:"17a5aa9d-ef26-4724-bbd7-3f4b190c3db1", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5bb8b6775d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-5bb8b6775d-hjglt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali935173db813", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:46.249778 env[1271]: 2025-07-10 01:08:46.227 [INFO][4133] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Namespace="calico-system" Pod="calico-kube-controllers-5bb8b6775d-hjglt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:46.249778 env[1271]: 2025-07-10 01:08:46.227 [INFO][4133] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali935173db813 ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Namespace="calico-system" Pod="calico-kube-controllers-5bb8b6775d-hjglt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:46.249778 env[1271]: 2025-07-10 01:08:46.231 [INFO][4133] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Namespace="calico-system" Pod="calico-kube-controllers-5bb8b6775d-hjglt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:46.249778 env[1271]: 2025-07-10 01:08:46.233 [INFO][4133] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Namespace="calico-system" Pod="calico-kube-controllers-5bb8b6775d-hjglt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0", GenerateName:"calico-kube-controllers-5bb8b6775d-", Namespace:"calico-system", SelfLink:"", UID:"17a5aa9d-ef26-4724-bbd7-3f4b190c3db1", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5bb8b6775d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320", Pod:"calico-kube-controllers-5bb8b6775d-hjglt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali935173db813", MAC:"6e:16:87:68:1f:fc", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:46.249778 env[1271]: 2025-07-10 01:08:46.242 [INFO][4133] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320" Namespace="calico-system" Pod="calico-kube-controllers-5bb8b6775d-hjglt" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:08:46.282000 audit[4215]: NETFILTER_CFG table=filter:107 family=2 entries=45 op=nft_register_chain pid=4215 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:46.282000 audit[4215]: SYSCALL arch=c000003e syscall=46 success=yes exit=24264 a0=3 a1=7fffbaf4c540 a2=0 a3=7fffbaf4c52c items=0 ppid=3510 pid=4215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.282000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:46.287540 systemd[1]: run-containerd-runc-k8s.io-7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d-runc.zuSsE6.mount: Deactivated successfully. Jul 10 01:08:46.294052 systemd[1]: Started cri-containerd-7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d.scope. Jul 10 01:08:46.315000 env[1271]: time="2025-07-10T01:08:46.300597181Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:46.315000 env[1271]: time="2025-07-10T01:08:46.300626287Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:46.315000 env[1271]: time="2025-07-10T01:08:46.300637559Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:46.315000 env[1271]: time="2025-07-10T01:08:46.300721707Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48 pid=4214 runtime=io.containerd.runc.v2 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit: BPF prog-id=181 op=LOAD Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4184 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343162623864313663653463373332303032306563383134376531 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4184 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343162623864313663653463373332303032306563383134376531 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit: BPF prog-id=182 op=LOAD Jul 10 01:08:46.320000 audit[4195]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003e6b80 items=0 ppid=4184 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343162623864313663653463373332303032306563383134376531 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit: BPF prog-id=183 op=LOAD Jul 10 01:08:46.320000 audit[4195]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003e6bc8 items=0 ppid=4184 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343162623864313663653463373332303032306563383134376531 Jul 10 01:08:46.320000 audit: BPF prog-id=183 op=UNLOAD Jul 10 01:08:46.320000 audit: BPF prog-id=182 op=UNLOAD Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { perfmon } for pid=4195 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit[4195]: AVC avc: denied { bpf } for pid=4195 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.320000 audit: BPF prog-id=184 op=LOAD Jul 10 01:08:46.320000 audit[4195]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003e6fd8 items=0 ppid=4184 pid=4195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343162623864313663653463373332303032306563383134376531 Jul 10 01:08:46.331000 audit[4261]: NETFILTER_CFG table=filter:108 family=2 entries=77 op=nft_register_chain pid=4261 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:46.331000 audit[4261]: SYSCALL arch=c000003e syscall=46 success=yes exit=42128 a0=3 a1=7fff0afb9400 a2=0 a3=7fff0afb93ec items=0 ppid=3510 pid=4261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.331000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:46.353532 env[1271]: time="2025-07-10T01:08:46.323677119Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:46.353532 env[1271]: time="2025-07-10T01:08:46.323708718Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:46.353532 env[1271]: time="2025-07-10T01:08:46.323715633Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:46.353532 env[1271]: time="2025-07-10T01:08:46.323833337Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320 pid=4247 runtime=io.containerd.runc.v2 Jul 10 01:08:46.324034 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:08:46.333361 systemd[1]: Started cri-containerd-1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48.scope. Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.358000 audit: BPF prog-id=185 op=LOAD Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4214 pid=4228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163633265393037303038633365366536363737383035396263383666 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4214 pid=4228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163633265393037303038633365366536363737383035396263383666 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit: BPF prog-id=186 op=LOAD Jul 10 01:08:46.361000 audit[4228]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000259ce0 items=0 ppid=4214 pid=4228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163633265393037303038633365366536363737383035396263383666 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit: BPF prog-id=187 op=LOAD Jul 10 01:08:46.361000 audit[4228]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000259d28 items=0 ppid=4214 pid=4228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163633265393037303038633365366536363737383035396263383666 Jul 10 01:08:46.361000 audit: BPF prog-id=187 op=UNLOAD Jul 10 01:08:46.361000 audit: BPF prog-id=186 op=UNLOAD Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { perfmon } for pid=4228 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit[4228]: AVC avc: denied { bpf } for pid=4228 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.361000 audit: BPF prog-id=188 op=LOAD Jul 10 01:08:46.361000 audit[4228]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00035c138 items=0 ppid=4214 pid=4228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3163633265393037303038633365366536363737383035396263383666 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit: BPF prog-id=189 op=LOAD Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4247 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035663565306362323633343332336335356532636166633262666565 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4247 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035663565306362323633343332336335356532636166633262666565 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit: BPF prog-id=190 op=LOAD Jul 10 01:08:46.387000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000215a50 items=0 ppid=4247 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035663565306362323633343332336335356532636166633262666565 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit: BPF prog-id=191 op=LOAD Jul 10 01:08:46.387000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000215a98 items=0 ppid=4247 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035663565306362323633343332336335356532636166633262666565 Jul 10 01:08:46.387000 audit: BPF prog-id=191 op=UNLOAD Jul 10 01:08:46.387000 audit: BPF prog-id=190 op=UNLOAD Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { perfmon } for pid=4263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit[4263]: AVC avc: denied { bpf } for pid=4263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:46.387000 audit: BPF prog-id=192 op=LOAD Jul 10 01:08:46.387000 audit[4263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000215ea8 items=0 ppid=4247 pid=4263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:46.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035663565306362323633343332336335356532636166633262666565 Jul 10 01:08:46.365030 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:08:46.452703 env[1271]: time="2025-07-10T01:08:46.386504094Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-bc9b765d7-h2wtb,Uid:24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d\"" Jul 10 01:08:46.452703 env[1271]: time="2025-07-10T01:08:46.400033943Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65cf5b8cbd-zbf79,Uid:1b216b96-a8e0-466c-b036-61e1eca75bd4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48\"" Jul 10 01:08:46.452703 env[1271]: time="2025-07-10T01:08:46.420610616Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-5bb8b6775d-hjglt,Uid:17a5aa9d-ef26-4724-bbd7-3f4b190c3db1,Namespace:calico-system,Attempt:1,} returns sandbox id \"05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320\"" Jul 10 01:08:46.366441 systemd[1]: Started cri-containerd-05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320.scope. Jul 10 01:08:46.388811 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:08:46.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.109:22-80.94.95.115:25054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:46.844551 systemd[1]: Started sshd@9-139.178.70.109:22-80.94.95.115:25054.service. Jul 10 01:08:46.926527 systemd-networkd[1083]: cali456fefa2075: Gained IPv6LL Jul 10 01:08:47.455808 env[1271]: time="2025-07-10T01:08:47.455725061Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:47.483340 env[1271]: time="2025-07-10T01:08:47.483252598Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:47.496998 env[1271]: time="2025-07-10T01:08:47.496931145Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:47.517349 env[1271]: time="2025-07-10T01:08:47.516812411Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:47.517349 env[1271]: time="2025-07-10T01:08:47.517258856Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 10 01:08:47.758512 systemd-networkd[1083]: cali935173db813: Gained IPv6LL Jul 10 01:08:47.886476 systemd-networkd[1083]: cali10a52582a39: Gained IPv6LL Jul 10 01:08:47.886700 systemd-networkd[1083]: cali5c94aadfcdc: Gained IPv6LL Jul 10 01:08:47.967763 env[1271]: time="2025-07-10T01:08:47.967721611Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 01:08:48.078870 env[1271]: time="2025-07-10T01:08:48.078687771Z" level=info msg="CreateContainer within sandbox \"1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 01:08:48.079193 env[1271]: time="2025-07-10T01:08:48.079163251Z" level=info msg="CreateContainer within sandbox \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 01:08:48.091642 env[1271]: time="2025-07-10T01:08:48.091505952Z" level=info msg="CreateContainer within sandbox \"7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 01:08:48.100313 kubelet[2155]: E0710 01:08:48.100275 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.305s" Jul 10 01:08:48.113062 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount42918410.mount: Deactivated successfully. Jul 10 01:08:48.115792 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount332111547.mount: Deactivated successfully. Jul 10 01:08:48.133163 env[1271]: time="2025-07-10T01:08:48.133125960Z" level=info msg="CreateContainer within sandbox \"1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"1e58358ab1870905657795957ce4e8dd863a4cedc6a669abbebb5a0cf14b471e\"" Jul 10 01:08:48.140351 env[1271]: time="2025-07-10T01:08:48.140313941Z" level=info msg="StopPodSandbox for \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\"" Jul 10 01:08:48.140484 env[1271]: time="2025-07-10T01:08:48.140465993Z" level=info msg="StopPodSandbox for \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\"" Jul 10 01:08:48.140707 env[1271]: time="2025-07-10T01:08:48.140689767Z" level=info msg="StopPodSandbox for \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\"" Jul 10 01:08:48.154043 env[1271]: time="2025-07-10T01:08:48.154018299Z" level=info msg="StartContainer for \"1e58358ab1870905657795957ce4e8dd863a4cedc6a669abbebb5a0cf14b471e\"" Jul 10 01:08:48.156824 env[1271]: time="2025-07-10T01:08:48.155684514Z" level=info msg="CreateContainer within sandbox \"7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b\"" Jul 10 01:08:48.156824 env[1271]: time="2025-07-10T01:08:48.156656385Z" level=info msg="StartContainer for \"5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b\"" Jul 10 01:08:48.164494 env[1271]: time="2025-07-10T01:08:48.164461697Z" level=info msg="CreateContainer within sandbox \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413\"" Jul 10 01:08:48.164834 env[1271]: time="2025-07-10T01:08:48.164815415Z" level=info msg="StartContainer for \"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413\"" Jul 10 01:08:48.179492 systemd[1]: Started cri-containerd-f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413.scope. Jul 10 01:08:48.197804 systemd[1]: Started cri-containerd-1e58358ab1870905657795957ce4e8dd863a4cedc6a669abbebb5a0cf14b471e.scope. Jul 10 01:08:48.221949 systemd[1]: Started cri-containerd-5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b.scope. Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.225000 audit: BPF prog-id=193 op=LOAD Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4214 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353833353861623138373039303536353737393539353763653465 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4214 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353833353861623138373039303536353737393539353763653465 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit: BPF prog-id=194 op=LOAD Jul 10 01:08:48.226000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00022bb20 items=0 ppid=4214 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353833353861623138373039303536353737393539353763653465 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit: BPF prog-id=195 op=LOAD Jul 10 01:08:48.226000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00022bb68 items=0 ppid=4214 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353833353861623138373039303536353737393539353763653465 Jul 10 01:08:48.226000 audit: BPF prog-id=195 op=UNLOAD Jul 10 01:08:48.226000 audit: BPF prog-id=194 op=UNLOAD Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { perfmon } for pid=4341 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit[4341]: AVC avc: denied { bpf } for pid=4341 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.226000 audit: BPF prog-id=196 op=LOAD Jul 10 01:08:48.226000 audit[4341]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00022bf78 items=0 ppid=4214 pid=4341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.226000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165353833353861623138373039303536353737393539353763653465 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.228000 audit: BPF prog-id=197 op=LOAD Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3908 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634636163323365373932656334613534333461303933373464323736 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3908 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634636163323365373932656334613534333461303933373464323736 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit: BPF prog-id=198 op=LOAD Jul 10 01:08:48.229000 audit[4358]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000024800 items=0 ppid=3908 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634636163323365373932656334613534333461303933373464323736 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit: BPF prog-id=199 op=LOAD Jul 10 01:08:48.229000 audit[4358]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000024848 items=0 ppid=3908 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634636163323365373932656334613534333461303933373464323736 Jul 10 01:08:48.229000 audit: BPF prog-id=199 op=UNLOAD Jul 10 01:08:48.229000 audit: BPF prog-id=198 op=UNLOAD Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { perfmon } for pid=4358 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit[4358]: AVC avc: denied { bpf } for pid=4358 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.229000 audit: BPF prog-id=200 op=LOAD Jul 10 01:08:48.229000 audit[4358]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000024c58 items=0 ppid=3908 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.229000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634636163323365373932656334613534333461303933373464323736 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.253000 audit: BPF prog-id=201 op=LOAD Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4184 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530353163393764626536326664336537646366663465383535373164 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4184 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530353163393764626536326664336537646366663465383535373164 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit: BPF prog-id=202 op=LOAD Jul 10 01:08:48.254000 audit[4345]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000325970 items=0 ppid=4184 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530353163393764626536326664336537646366663465383535373164 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit: BPF prog-id=203 op=LOAD Jul 10 01:08:48.254000 audit[4345]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003259b8 items=0 ppid=4184 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530353163393764626536326664336537646366663465383535373164 Jul 10 01:08:48.254000 audit: BPF prog-id=203 op=UNLOAD Jul 10 01:08:48.254000 audit: BPF prog-id=202 op=UNLOAD Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { perfmon } for pid=4345 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit[4345]: AVC avc: denied { bpf } for pid=4345 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:48.254000 audit: BPF prog-id=204 op=LOAD Jul 10 01:08:48.254000 audit[4345]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000325dc8 items=0 ppid=4184 pid=4345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:48.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530353163393764626536326664336537646366663465383535373164 Jul 10 01:08:48.297233 env[1271]: time="2025-07-10T01:08:48.297196430Z" level=info msg="StartContainer for \"5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b\" returns successfully" Jul 10 01:08:48.342500 env[1271]: time="2025-07-10T01:08:48.342437433Z" level=info msg="StartContainer for \"1e58358ab1870905657795957ce4e8dd863a4cedc6a669abbebb5a0cf14b471e\" returns successfully" Jul 10 01:08:48.359278 env[1271]: time="2025-07-10T01:08:48.359236216Z" level=info msg="StartContainer for \"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413\" returns successfully" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.460 [INFO][4408] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.464 [INFO][4408] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" iface="eth0" netns="/var/run/netns/cni-8899b547-9f6d-4932-afad-e2cc96a4a594" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.468 [INFO][4408] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" iface="eth0" netns="/var/run/netns/cni-8899b547-9f6d-4932-afad-e2cc96a4a594" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.469 [INFO][4408] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" iface="eth0" netns="/var/run/netns/cni-8899b547-9f6d-4932-afad-e2cc96a4a594" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.469 [INFO][4408] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.469 [INFO][4408] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.885 [INFO][4454] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" HandleID="k8s-pod-network.fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.903 [INFO][4454] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.903 [INFO][4454] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.912 [WARNING][4454] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" HandleID="k8s-pod-network.fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.912 [INFO][4454] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" HandleID="k8s-pod-network.fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.913 [INFO][4454] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:48.919378 env[1271]: 2025-07-10 01:08:48.916 [INFO][4408] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:08:48.922720 env[1271]: time="2025-07-10T01:08:48.919520210Z" level=info msg="TearDown network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\" successfully" Jul 10 01:08:48.922720 env[1271]: time="2025-07-10T01:08:48.919542646Z" level=info msg="StopPodSandbox for \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\" returns successfully" Jul 10 01:08:48.925886 env[1271]: time="2025-07-10T01:08:48.925855127Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-vgp2r,Uid:1ec13fd4-3912-4c69-8f01-81c69b5d4def,Namespace:kube-system,Attempt:1,}" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.457 [INFO][4409] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.464 [INFO][4409] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" iface="eth0" netns="/var/run/netns/cni-72561f3c-a8c6-a331-57d2-826b280f2ce3" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.468 [INFO][4409] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" iface="eth0" netns="/var/run/netns/cni-72561f3c-a8c6-a331-57d2-826b280f2ce3" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.468 [INFO][4409] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" iface="eth0" netns="/var/run/netns/cni-72561f3c-a8c6-a331-57d2-826b280f2ce3" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.469 [INFO][4409] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.469 [INFO][4409] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.904 [INFO][4457] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" HandleID="k8s-pod-network.1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.904 [INFO][4457] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.914 [INFO][4457] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.920 [WARNING][4457] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" HandleID="k8s-pod-network.1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.920 [INFO][4457] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" HandleID="k8s-pod-network.1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.921 [INFO][4457] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:48.929414 env[1271]: 2025-07-10 01:08:48.927 [INFO][4409] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:08:48.945163 env[1271]: time="2025-07-10T01:08:48.929835897Z" level=info msg="TearDown network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\" successfully" Jul 10 01:08:48.945163 env[1271]: time="2025-07-10T01:08:48.929868008Z" level=info msg="StopPodSandbox for \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\" returns successfully" Jul 10 01:08:48.945163 env[1271]: time="2025-07-10T01:08:48.930271245Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-w6zc4,Uid:579e5385-aa98-44e2-be2c-7cc96ffa90c7,Namespace:calico-system,Attempt:1,}" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.462 [INFO][4410] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.465 [INFO][4410] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" iface="eth0" netns="/var/run/netns/cni-72e7f428-6a1c-3696-0a22-7b35daba05a4" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.469 [INFO][4410] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" iface="eth0" netns="/var/run/netns/cni-72e7f428-6a1c-3696-0a22-7b35daba05a4" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.470 [INFO][4410] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" iface="eth0" netns="/var/run/netns/cni-72e7f428-6a1c-3696-0a22-7b35daba05a4" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.470 [INFO][4410] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.470 [INFO][4410] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.905 [INFO][4456] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" HandleID="k8s-pod-network.0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.905 [INFO][4456] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.922 [INFO][4456] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.933 [WARNING][4456] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" HandleID="k8s-pod-network.0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.933 [INFO][4456] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" HandleID="k8s-pod-network.0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.945 [INFO][4456] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:48.948023 env[1271]: 2025-07-10 01:08:48.946 [INFO][4410] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:08:48.989562 env[1271]: time="2025-07-10T01:08:48.948146066Z" level=info msg="TearDown network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\" successfully" Jul 10 01:08:48.989562 env[1271]: time="2025-07-10T01:08:48.948166152Z" level=info msg="StopPodSandbox for \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\" returns successfully" Jul 10 01:08:48.989562 env[1271]: time="2025-07-10T01:08:48.948616917Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9zr5h,Uid:7bc9b954-a61b-4cce-9f51-d15d6378a7d2,Namespace:kube-system,Attempt:1,}" Jul 10 01:08:49.108671 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1693906277.mount: Deactivated successfully. Jul 10 01:08:49.108735 systemd[1]: run-netns-cni\x2d72e7f428\x2d6a1c\x2d3696\x2d0a22\x2d7b35daba05a4.mount: Deactivated successfully. Jul 10 01:08:49.108777 systemd[1]: run-netns-cni\x2d8899b547\x2d9f6d\x2d4932\x2dafad\x2de2cc96a4a594.mount: Deactivated successfully. Jul 10 01:08:49.108809 systemd[1]: run-netns-cni\x2d72561f3c\x2da8c6\x2da331\x2d57d2\x2d826b280f2ce3.mount: Deactivated successfully. Jul 10 01:08:49.305411 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 01:08:49.305500 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6ae40113a51: link becomes ready Jul 10 01:08:49.317608 systemd-networkd[1083]: cali6ae40113a51: Link UP Jul 10 01:08:49.317723 systemd-networkd[1083]: cali6ae40113a51: Gained carrier Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.165 [INFO][4482] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0 goldmane-768f4c5c69- calico-system 579e5385-aa98-44e2-be2c-7cc96ffa90c7 1029 0 2025-07-10 01:08:18 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-w6zc4 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali6ae40113a51 [] [] }} ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Namespace="calico-system" Pod="goldmane-768f4c5c69-w6zc4" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--w6zc4-" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.165 [INFO][4482] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Namespace="calico-system" Pod="goldmane-768f4c5c69-w6zc4" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.212 [INFO][4516] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" HandleID="k8s-pod-network.c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.213 [INFO][4516] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" HandleID="k8s-pod-network.c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-w6zc4", "timestamp":"2025-07-10 01:08:49.212514893 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.213 [INFO][4516] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.213 [INFO][4516] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.213 [INFO][4516] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.220 [INFO][4516] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" host="localhost" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.238 [INFO][4516] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.265 [INFO][4516] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.265 [INFO][4516] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.267 [INFO][4516] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.267 [INFO][4516] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" host="localhost" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.269 [INFO][4516] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.272 [INFO][4516] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" host="localhost" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.296 [INFO][4516] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" host="localhost" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.296 [INFO][4516] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" host="localhost" Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.296 [INFO][4516] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:49.334459 env[1271]: 2025-07-10 01:08:49.296 [INFO][4516] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" HandleID="k8s-pod-network.c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:49.334955 env[1271]: 2025-07-10 01:08:49.300 [INFO][4482] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Namespace="calico-system" Pod="goldmane-768f4c5c69-w6zc4" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"579e5385-aa98-44e2-be2c-7cc96ffa90c7", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-w6zc4", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6ae40113a51", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:49.334955 env[1271]: 2025-07-10 01:08:49.300 [INFO][4482] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Namespace="calico-system" Pod="goldmane-768f4c5c69-w6zc4" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:49.334955 env[1271]: 2025-07-10 01:08:49.300 [INFO][4482] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6ae40113a51 ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Namespace="calico-system" Pod="goldmane-768f4c5c69-w6zc4" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:49.334955 env[1271]: 2025-07-10 01:08:49.305 [INFO][4482] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Namespace="calico-system" Pod="goldmane-768f4c5c69-w6zc4" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:49.334955 env[1271]: 2025-07-10 01:08:49.307 [INFO][4482] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Namespace="calico-system" Pod="goldmane-768f4c5c69-w6zc4" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"579e5385-aa98-44e2-be2c-7cc96ffa90c7", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c", Pod:"goldmane-768f4c5c69-w6zc4", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6ae40113a51", MAC:"8a:ea:f6:75:ca:9a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:49.334955 env[1271]: 2025-07-10 01:08:49.332 [INFO][4482] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c" Namespace="calico-system" Pod="goldmane-768f4c5c69-w6zc4" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:08:49.444122 env[1271]: time="2025-07-10T01:08:49.443839701Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:49.444122 env[1271]: time="2025-07-10T01:08:49.443866775Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:49.444122 env[1271]: time="2025-07-10T01:08:49.443909324Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:49.444474 env[1271]: time="2025-07-10T01:08:49.444413373Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c pid=4553 runtime=io.containerd.runc.v2 Jul 10 01:08:49.465888 systemd[1]: run-containerd-runc-k8s.io-c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c-runc.bbbMjs.mount: Deactivated successfully. Jul 10 01:08:49.468377 systemd[1]: Started cri-containerd-c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c.scope. Jul 10 01:08:49.490496 kernel: kauditd_printk_skb: 459 callbacks suppressed Jul 10 01:08:49.490572 kernel: audit: type=1400 audit(1752109729.486:1345): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.493551 kernel: audit: type=1400 audit(1752109729.486:1346): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.507186 kernel: audit: type=1400 audit(1752109729.486:1347): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.507240 kernel: audit: type=1400 audit(1752109729.486:1348): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.507264 kernel: audit: type=1400 audit(1752109729.486:1349): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.507355 kernel: audit: type=1400 audit(1752109729.486:1350): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.510897 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:08:49.523414 kernel: audit: type=1400 audit(1752109729.486:1351): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.532184 kernel: audit: type=1400 audit(1752109729.486:1352): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.532233 kernel: audit: type=1400 audit(1752109729.486:1353): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.541820 kernel: audit: type=1400 audit(1752109729.493:1354): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.493000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.493000 audit: BPF prog-id=205 op=LOAD Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4553 pid=4562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331663632393838356365383430666231336266643537373932316566 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4553 pid=4562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331663632393838356365383430666231336266643537373932316566 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.500000 audit: BPF prog-id=206 op=LOAD Jul 10 01:08:49.500000 audit[4562]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003c85d0 items=0 ppid=4553 pid=4562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.500000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331663632393838356365383430666231336266643537373932316566 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit: BPF prog-id=207 op=LOAD Jul 10 01:08:49.503000 audit[4562]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003c8618 items=0 ppid=4553 pid=4562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331663632393838356365383430666231336266643537373932316566 Jul 10 01:08:49.503000 audit: BPF prog-id=207 op=UNLOAD Jul 10 01:08:49.503000 audit: BPF prog-id=206 op=UNLOAD Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { perfmon } for pid=4562 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit[4562]: AVC avc: denied { bpf } for pid=4562 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.503000 audit: BPF prog-id=208 op=LOAD Jul 10 01:08:49.503000 audit[4562]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c8a28 items=0 ppid=4553 pid=4562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331663632393838356365383430666231336266643537373932316566 Jul 10 01:08:49.567019 env[1271]: time="2025-07-10T01:08:49.548729608Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-w6zc4,Uid:579e5385-aa98-44e2-be2c-7cc96ffa90c7,Namespace:calico-system,Attempt:1,} returns sandbox id \"c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c\"" Jul 10 01:08:49.603908 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3ce43feb2bb: link becomes ready Jul 10 01:08:49.602093 systemd-networkd[1083]: cali3ce43feb2bb: Link UP Jul 10 01:08:49.602305 systemd-networkd[1083]: cali3ce43feb2bb: Gained carrier Jul 10 01:08:49.627000 audit[4595]: NETFILTER_CFG table=filter:109 family=2 entries=70 op=nft_register_chain pid=4595 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:49.627000 audit[4595]: SYSCALL arch=c000003e syscall=46 success=yes exit=33972 a0=3 a1=7ffc97b1deb0 a2=0 a3=7ffc97b1de9c items=0 ppid=3510 pid=4595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.627000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.159 [INFO][4491] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0 coredns-674b8bbfcf- kube-system 1ec13fd4-3912-4c69-8f01-81c69b5d4def 1030 0 2025-07-10 01:07:36 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-vgp2r eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3ce43feb2bb [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Namespace="kube-system" Pod="coredns-674b8bbfcf-vgp2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--vgp2r-" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.159 [INFO][4491] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Namespace="kube-system" Pod="coredns-674b8bbfcf-vgp2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.219 [INFO][4517] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" HandleID="k8s-pod-network.3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.220 [INFO][4517] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" HandleID="k8s-pod-network.3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccff0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-vgp2r", "timestamp":"2025-07-10 01:08:49.219637142 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.220 [INFO][4517] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.296 [INFO][4517] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.296 [INFO][4517] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.334 [INFO][4517] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" host="localhost" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.399 [INFO][4517] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.408 [INFO][4517] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.449 [INFO][4517] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.496 [INFO][4517] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.496 [INFO][4517] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" host="localhost" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.525 [INFO][4517] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.568 [INFO][4517] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" host="localhost" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.590 [INFO][4517] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" host="localhost" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.590 [INFO][4517] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" host="localhost" Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.590 [INFO][4517] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:49.654844 env[1271]: 2025-07-10 01:08:49.590 [INFO][4517] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" HandleID="k8s-pod-network.3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:49.662473 env[1271]: 2025-07-10 01:08:49.594 [INFO][4491] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Namespace="kube-system" Pod="coredns-674b8bbfcf-vgp2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"1ec13fd4-3912-4c69-8f01-81c69b5d4def", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 7, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-vgp2r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3ce43feb2bb", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:49.662473 env[1271]: 2025-07-10 01:08:49.594 [INFO][4491] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Namespace="kube-system" Pod="coredns-674b8bbfcf-vgp2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:49.662473 env[1271]: 2025-07-10 01:08:49.594 [INFO][4491] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3ce43feb2bb ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Namespace="kube-system" Pod="coredns-674b8bbfcf-vgp2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:49.662473 env[1271]: 2025-07-10 01:08:49.606 [INFO][4491] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Namespace="kube-system" Pod="coredns-674b8bbfcf-vgp2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:49.662473 env[1271]: 2025-07-10 01:08:49.606 [INFO][4491] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Namespace="kube-system" Pod="coredns-674b8bbfcf-vgp2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"1ec13fd4-3912-4c69-8f01-81c69b5d4def", ResourceVersion:"1030", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 7, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc", Pod:"coredns-674b8bbfcf-vgp2r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3ce43feb2bb", MAC:"ca:36:e1:1d:55:f6", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:49.662473 env[1271]: 2025-07-10 01:08:49.652 [INFO][4491] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc" Namespace="kube-system" Pod="coredns-674b8bbfcf-vgp2r" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:08:49.672721 env[1271]: time="2025-07-10T01:08:49.672550304Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:49.672721 env[1271]: time="2025-07-10T01:08:49.672582375Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:49.672721 env[1271]: time="2025-07-10T01:08:49.672589805Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:49.678610 env[1271]: time="2025-07-10T01:08:49.672989834Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc pid=4608 runtime=io.containerd.runc.v2 Jul 10 01:08:49.694970 systemd[1]: Started cri-containerd-3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc.scope. Jul 10 01:08:49.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.747000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.747000 audit: BPF prog-id=209 op=LOAD Jul 10 01:08:49.747000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.747000 audit[4617]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4608 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331303766363137313862383839323361656537626136353735306339 Jul 10 01:08:49.747000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.747000 audit[4617]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4608 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331303766363137313862383839323361656537626136353735306339 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit: BPF prog-id=210 op=LOAD Jul 10 01:08:49.748000 audit[4617]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00029b020 items=0 ppid=4608 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331303766363137313862383839323361656537626136353735306339 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.748000 audit: BPF prog-id=211 op=LOAD Jul 10 01:08:49.748000 audit[4617]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00029b068 items=0 ppid=4608 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331303766363137313862383839323361656537626136353735306339 Jul 10 01:08:49.749000 audit: BPF prog-id=211 op=UNLOAD Jul 10 01:08:49.749000 audit: BPF prog-id=210 op=UNLOAD Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { perfmon } for pid=4617 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit[4617]: AVC avc: denied { bpf } for pid=4617 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:49.749000 audit: BPF prog-id=212 op=LOAD Jul 10 01:08:49.749000 audit[4617]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00029b478 items=0 ppid=4608 pid=4617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:49.749000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331303766363137313862383839323361656537626136353735306339 Jul 10 01:08:49.787065 env[1271]: time="2025-07-10T01:08:49.774673101Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-vgp2r,Uid:1ec13fd4-3912-4c69-8f01-81c69b5d4def,Namespace:kube-system,Attempt:1,} returns sandbox id \"3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc\"" Jul 10 01:08:49.750133 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:08:49.834269 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali961dbdf8a73: link becomes ready Jul 10 01:08:49.858232 kubelet[2155]: I0710 01:08:49.649713 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-bc9b765d7-h2wtb" podStartSLOduration=33.63970176 podStartE2EDuration="33.63970176s" podCreationTimestamp="2025-07-10 01:08:16 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:08:49.610552871 +0000 UTC m=+77.633888671" watchObservedRunningTime="2025-07-10 01:08:49.63970176 +0000 UTC m=+77.663037562" Jul 10 01:08:49.858232 kubelet[2155]: I0710 01:08:49.852248 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-bc9b765d7-d89jt" podStartSLOduration=29.530744724 podStartE2EDuration="33.852231309s" podCreationTimestamp="2025-07-10 01:08:16 +0000 UTC" firstStartedPulling="2025-07-10 01:08:43.514169858 +0000 UTC m=+71.537505653" lastFinishedPulling="2025-07-10 01:08:47.835656445 +0000 UTC m=+75.858992238" observedRunningTime="2025-07-10 01:08:49.785697854 +0000 UTC m=+77.809033647" watchObservedRunningTime="2025-07-10 01:08:49.852231309 +0000 UTC m=+77.875567108" Jul 10 01:08:49.829431 systemd-networkd[1083]: cali961dbdf8a73: Link UP Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.179 [INFO][4496] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0 coredns-674b8bbfcf- kube-system 7bc9b954-a61b-4cce-9f51-d15d6378a7d2 1031 0 2025-07-10 01:07:36 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-9zr5h eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali961dbdf8a73 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zr5h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9zr5h-" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.179 [INFO][4496] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zr5h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.252 [INFO][4528] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" HandleID="k8s-pod-network.d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.261 [INFO][4528] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" HandleID="k8s-pod-network.d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000325530), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-9zr5h", "timestamp":"2025-07-10 01:08:49.252281782 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.262 [INFO][4528] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.590 [INFO][4528] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.590 [INFO][4528] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.638 [INFO][4528] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" host="localhost" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.677 [INFO][4528] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.709 [INFO][4528] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.713 [INFO][4528] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.720 [INFO][4528] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.720 [INFO][4528] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" host="localhost" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.726 [INFO][4528] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164 Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.789 [INFO][4528] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" host="localhost" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.825 [INFO][4528] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" host="localhost" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.826 [INFO][4528] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" host="localhost" Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.826 [INFO][4528] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:08:49.858646 env[1271]: 2025-07-10 01:08:49.826 [INFO][4528] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" HandleID="k8s-pod-network.d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:49.830264 systemd-networkd[1083]: cali961dbdf8a73: Gained carrier Jul 10 01:08:49.859237 env[1271]: 2025-07-10 01:08:49.827 [INFO][4496] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zr5h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7bc9b954-a61b-4cce-9f51-d15d6378a7d2", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 7, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-9zr5h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali961dbdf8a73", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:49.859237 env[1271]: 2025-07-10 01:08:49.827 [INFO][4496] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zr5h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:49.859237 env[1271]: 2025-07-10 01:08:49.827 [INFO][4496] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali961dbdf8a73 ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zr5h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:49.859237 env[1271]: 2025-07-10 01:08:49.831 [INFO][4496] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zr5h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:49.859237 env[1271]: 2025-07-10 01:08:49.831 [INFO][4496] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zr5h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7bc9b954-a61b-4cce-9f51-d15d6378a7d2", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 7, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164", Pod:"coredns-674b8bbfcf-9zr5h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali961dbdf8a73", MAC:"ee:c2:99:0d:87:06", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:08:49.859237 env[1271]: 2025-07-10 01:08:49.851 [INFO][4496] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164" Namespace="kube-system" Pod="coredns-674b8bbfcf-9zr5h" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:08:49.964676 env[1271]: time="2025-07-10T01:08:49.964646592Z" level=info msg="CreateContainer within sandbox \"3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 01:08:50.011128 env[1271]: time="2025-07-10T01:08:50.011071197Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:08:50.011128 env[1271]: time="2025-07-10T01:08:50.011105377Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:08:50.011284 env[1271]: time="2025-07-10T01:08:50.011259051Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:08:50.011485 env[1271]: time="2025-07-10T01:08:50.011458737Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164 pid=4655 runtime=io.containerd.runc.v2 Jul 10 01:08:50.027164 systemd[1]: Started cri-containerd-d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164.scope. Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit: BPF prog-id=213 op=LOAD Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4655 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:50.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437303830346566616365396666303465616139323566663539653937 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=4655 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:50.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437303830346566616365396666303465616139323566663539653937 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit: BPF prog-id=214 op=LOAD Jul 10 01:08:50.042000 audit[4665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0002f5d90 items=0 ppid=4655 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:50.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437303830346566616365396666303465616139323566663539653937 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit: BPF prog-id=215 op=LOAD Jul 10 01:08:50.042000 audit[4665]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0002f5dd8 items=0 ppid=4655 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:50.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437303830346566616365396666303465616139323566663539653937 Jul 10 01:08:50.042000 audit: BPF prog-id=215 op=UNLOAD Jul 10 01:08:50.042000 audit: BPF prog-id=214 op=UNLOAD Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { perfmon } for pid=4665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit[4665]: AVC avc: denied { bpf } for pid=4665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:50.042000 audit: BPF prog-id=216 op=LOAD Jul 10 01:08:50.042000 audit[4665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003ea1e8 items=0 ppid=4655 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:50.042000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437303830346566616365396666303465616139323566663539653937 Jul 10 01:08:50.044077 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:08:50.138754 env[1271]: time="2025-07-10T01:08:50.138687775Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-9zr5h,Uid:7bc9b954-a61b-4cce-9f51-d15d6378a7d2,Namespace:kube-system,Attempt:1,} returns sandbox id \"d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164\"" Jul 10 01:08:50.251000 audit[4692]: NETFILTER_CFG table=filter:110 family=2 entries=98 op=nft_register_chain pid=4692 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:08:50.251000 audit[4692]: SYSCALL arch=c000003e syscall=46 success=yes exit=49248 a0=3 a1=7ffffa602500 a2=0 a3=7ffffa6024ec items=0 ppid=3510 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:50.251000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:08:50.287179 env[1271]: time="2025-07-10T01:08:50.287147567Z" level=info msg="CreateContainer within sandbox \"d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 01:08:50.463177 kubelet[2155]: I0710 01:08:50.463106 2155 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 01:08:50.474161 kubelet[2155]: I0710 01:08:50.474129 2155 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 01:08:50.474161 kubelet[2155]: I0710 01:08:50.474149 2155 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 01:08:50.894457 systemd-networkd[1083]: cali6ae40113a51: Gained IPv6LL Jul 10 01:08:50.947842 env[1271]: time="2025-07-10T01:08:50.947794114Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:51.004533 env[1271]: time="2025-07-10T01:08:51.004505162Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:51.018089 env[1271]: time="2025-07-10T01:08:51.018056956Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:51.027798 env[1271]: time="2025-07-10T01:08:51.027770332Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:51.028062 env[1271]: time="2025-07-10T01:08:51.028038830Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 10 01:08:51.028928 env[1271]: time="2025-07-10T01:08:51.028912165Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 01:08:51.044322 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount878870141.mount: Deactivated successfully. Jul 10 01:08:51.044429 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount81104369.mount: Deactivated successfully. Jul 10 01:08:51.054516 env[1271]: time="2025-07-10T01:08:51.054488062Z" level=info msg="CreateContainer within sandbox \"00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 01:08:51.105647 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2535321727.mount: Deactivated successfully. Jul 10 01:08:51.105710 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1048218971.mount: Deactivated successfully. Jul 10 01:08:51.129983 env[1271]: time="2025-07-10T01:08:51.129955272Z" level=info msg="CreateContainer within sandbox \"3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"027775133c247a129b22677ad47ed2aab315dd85e8c1d4dc1a1fe87ca48224b1\"" Jul 10 01:08:51.130568 env[1271]: time="2025-07-10T01:08:51.130554834Z" level=info msg="StartContainer for \"027775133c247a129b22677ad47ed2aab315dd85e8c1d4dc1a1fe87ca48224b1\"" Jul 10 01:08:51.149284 env[1271]: time="2025-07-10T01:08:51.149225327Z" level=info msg="CreateContainer within sandbox \"d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"89cdf258f8a569a9672fb804de9c9a1e1a9177a448e47a284a664c2592378f56\"" Jul 10 01:08:51.149904 env[1271]: time="2025-07-10T01:08:51.149885352Z" level=info msg="StartContainer for \"89cdf258f8a569a9672fb804de9c9a1e1a9177a448e47a284a664c2592378f56\"" Jul 10 01:08:51.157025 systemd[1]: Started cri-containerd-027775133c247a129b22677ad47ed2aab315dd85e8c1d4dc1a1fe87ca48224b1.scope. Jul 10 01:08:51.164660 systemd[1]: run-containerd-runc-k8s.io-027775133c247a129b22677ad47ed2aab315dd85e8c1d4dc1a1fe87ca48224b1-runc.SquvXM.mount: Deactivated successfully. Jul 10 01:08:51.185870 systemd[1]: Started cri-containerd-89cdf258f8a569a9672fb804de9c9a1e1a9177a448e47a284a664c2592378f56.scope. Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit: BPF prog-id=217 op=LOAD Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4608 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373737353133336332343761313239623232363737616434376564 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4608 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373737353133336332343761313239623232363737616434376564 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit: BPF prog-id=218 op=LOAD Jul 10 01:08:51.202000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003a62e0 items=0 ppid=4608 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373737353133336332343761313239623232363737616434376564 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit: BPF prog-id=219 op=LOAD Jul 10 01:08:51.202000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003a6328 items=0 ppid=4608 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373737353133336332343761313239623232363737616434376564 Jul 10 01:08:51.202000 audit: BPF prog-id=219 op=UNLOAD Jul 10 01:08:51.202000 audit: BPF prog-id=218 op=UNLOAD Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { perfmon } for pid=4700 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit[4700]: AVC avc: denied { bpf } for pid=4700 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.202000 audit: BPF prog-id=220 op=LOAD Jul 10 01:08:51.202000 audit[4700]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003a6738 items=0 ppid=4608 pid=4700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.202000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373737353133336332343761313239623232363737616434376564 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.203000 audit: BPF prog-id=221 op=LOAD Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bfc48 a2=10 a3=1c items=0 ppid=4655 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839636466323538663861353639613936373266623830346465396339 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bf6b0 a2=3c a3=8 items=0 ppid=4655 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839636466323538663861353639613936373266623830346465396339 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit: BPF prog-id=222 op=LOAD Jul 10 01:08:51.204000 audit[4724]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bf9d8 a2=78 a3=c000025210 items=0 ppid=4655 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839636466323538663861353639613936373266623830346465396339 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit: BPF prog-id=223 op=LOAD Jul 10 01:08:51.204000 audit[4724]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bf770 a2=78 a3=c000025258 items=0 ppid=4655 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839636466323538663861353639613936373266623830346465396339 Jul 10 01:08:51.204000 audit: BPF prog-id=223 op=UNLOAD Jul 10 01:08:51.204000 audit: BPF prog-id=222 op=UNLOAD Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { perfmon } for pid=4724 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit[4724]: AVC avc: denied { bpf } for pid=4724 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.204000 audit: BPF prog-id=224 op=LOAD Jul 10 01:08:51.204000 audit[4724]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bfc30 a2=78 a3=c000025668 items=0 ppid=4655 pid=4724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.204000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839636466323538663861353639613936373266623830346465396339 Jul 10 01:08:51.251281 env[1271]: time="2025-07-10T01:08:51.208044777Z" level=info msg="CreateContainer within sandbox \"00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"1fd3170f23dfe0c85c5fa2ae29041da622b19cbe0ed324c0d7faa52686821baa\"" Jul 10 01:08:51.251281 env[1271]: time="2025-07-10T01:08:51.208705065Z" level=info msg="StartContainer for \"1fd3170f23dfe0c85c5fa2ae29041da622b19cbe0ed324c0d7faa52686821baa\"" Jul 10 01:08:51.251281 env[1271]: time="2025-07-10T01:08:51.226124437Z" level=info msg="StartContainer for \"027775133c247a129b22677ad47ed2aab315dd85e8c1d4dc1a1fe87ca48224b1\" returns successfully" Jul 10 01:08:51.251281 env[1271]: time="2025-07-10T01:08:51.238683178Z" level=info msg="StartContainer for \"89cdf258f8a569a9672fb804de9c9a1e1a9177a448e47a284a664c2592378f56\" returns successfully" Jul 10 01:08:51.215621 systemd-networkd[1083]: cali3ce43feb2bb: Gained IPv6LL Jul 10 01:08:51.241597 systemd[1]: Started cri-containerd-1fd3170f23dfe0c85c5fa2ae29041da622b19cbe0ed324c0d7faa52686821baa.scope. Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f638c425518 items=0 ppid=4001 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643331373066323364666530633835633566613261653239303431 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit: BPF prog-id=225 op=LOAD Jul 10 01:08:51.261000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000259ba8 items=0 ppid=4001 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643331373066323364666530633835633566613261653239303431 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit: BPF prog-id=226 op=LOAD Jul 10 01:08:51.261000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000259bf8 items=0 ppid=4001 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643331373066323364666530633835633566613261653239303431 Jul 10 01:08:51.261000 audit: BPF prog-id=226 op=UNLOAD Jul 10 01:08:51.261000 audit: BPF prog-id=225 op=UNLOAD Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:08:51.261000 audit: BPF prog-id=227 op=LOAD Jul 10 01:08:51.261000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000259c88 items=0 ppid=4001 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3166643331373066323364666530633835633566613261653239303431 Jul 10 01:08:51.290357 env[1271]: time="2025-07-10T01:08:51.290320012Z" level=info msg="StartContainer for \"1fd3170f23dfe0c85c5fa2ae29041da622b19cbe0ed324c0d7faa52686821baa\" returns successfully" Jul 10 01:08:51.342433 systemd-networkd[1083]: cali961dbdf8a73: Gained IPv6LL Jul 10 01:08:51.382000 audit[4801]: NETFILTER_CFG table=filter:111 family=2 entries=18 op=nft_register_rule pid=4801 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:51.382000 audit[4801]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc3bda24b0 a2=0 a3=7ffc3bda249c items=0 ppid=2305 pid=4801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.382000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:51.387000 audit[4801]: NETFILTER_CFG table=nat:112 family=2 entries=16 op=nft_register_rule pid=4801 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:51.387000 audit[4801]: SYSCALL arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffc3bda24b0 a2=0 a3=0 items=0 ppid=2305 pid=4801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.387000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:51.404000 audit[4803]: NETFILTER_CFG table=filter:113 family=2 entries=18 op=nft_register_rule pid=4803 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:51.404000 audit[4803]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffcb4454780 a2=0 a3=7ffcb445476c items=0 ppid=2305 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.404000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:51.409000 audit[4803]: NETFILTER_CFG table=nat:114 family=2 entries=16 op=nft_register_rule pid=4803 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:51.409000 audit[4803]: SYSCALL arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffcb4454780 a2=0 a3=0 items=0 ppid=2305 pid=4803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:51.409000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:52.081672 kubelet[2155]: I0710 01:08:52.081613 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-65cf5b8cbd-zbf79" podStartSLOduration=35.081587711 podStartE2EDuration="35.081587711s" podCreationTimestamp="2025-07-10 01:08:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:08:49.902661449 +0000 UTC m=+77.925997254" watchObservedRunningTime="2025-07-10 01:08:52.081587711 +0000 UTC m=+80.104923515" Jul 10 01:08:52.095322 kubelet[2155]: I0710 01:08:52.095304 2155 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 01:08:52.220000 audit[4817]: NETFILTER_CFG table=filter:115 family=2 entries=18 op=nft_register_rule pid=4817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:52.220000 audit[4817]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff21fe7350 a2=0 a3=7fff21fe733c items=0 ppid=2305 pid=4817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:52.220000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:52.223792 kubelet[2155]: I0710 01:08:52.223670 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-9zr5h" podStartSLOduration=76.223647524 podStartE2EDuration="1m16.223647524s" podCreationTimestamp="2025-07-10 01:07:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:08:51.928236904 +0000 UTC m=+79.951572708" watchObservedRunningTime="2025-07-10 01:08:52.223647524 +0000 UTC m=+80.246983322" Jul 10 01:08:52.227000 audit[4817]: NETFILTER_CFG table=nat:116 family=2 entries=16 op=nft_register_rule pid=4817 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:08:52.227000 audit[4817]: SYSCALL arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7fff21fe7350 a2=0 a3=0 items=0 ppid=2305 pid=4817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:08:52.227000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:08:52.424000 audit[4735]: AVC avc: denied { getattr } for pid=4735 comm="coredns" path="cgroup:[4026533179]" dev="nsfs" ino=4026533179 scontext=system_u:system_r:svirt_lxc_net_t:s0:c739,c798 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 01:08:52.424000 audit[4735]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000150a98 a2=c000469968 a3=0 items=0 ppid=4655 pid=4735 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c739,c798 key=(null) Jul 10 01:08:52.424000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 01:08:52.428000 audit[4718]: AVC avc: denied { getattr } for pid=4718 comm="coredns" path="cgroup:[4026533176]" dev="nsfs" ino=4026533176 scontext=system_u:system_r:svirt_lxc_net_t:s0:c564,c935 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 01:08:52.428000 audit[4718]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000218600 a2=c000493628 a3=0 items=0 ppid=4608 pid=4718 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c564,c935 key=(null) Jul 10 01:08:52.428000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 01:08:53.763947 sshd[4302]: Invalid user carlos from 80.94.95.115 port 25054 Jul 10 01:08:54.155635 sshd[4302]: pam_faillock(sshd:auth): User unknown Jul 10 01:08:54.184000 audit[4302]: USER_AUTH pid=4302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="carlos" exe="/usr/sbin/sshd" hostname=80.94.95.115 addr=80.94.95.115 terminal=ssh res=failed' Jul 10 01:08:54.183933 sshd[4302]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:08:54.183973 sshd[4302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.94.95.115 Jul 10 01:08:54.184349 sshd[4302]: pam_faillock(sshd:auth): User unknown Jul 10 01:08:55.539200 env[1271]: time="2025-07-10T01:08:55.539169679Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:55.572390 env[1271]: time="2025-07-10T01:08:55.559080211Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:55.572390 env[1271]: time="2025-07-10T01:08:55.567250089Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:55.577102 env[1271]: time="2025-07-10T01:08:55.572666259Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:08:55.577102 env[1271]: time="2025-07-10T01:08:55.572964572Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 10 01:08:56.077472 sshd[4302]: Failed password for invalid user carlos from 80.94.95.115 port 25054 ssh2 Jul 10 01:08:56.404061 systemd[1]: Started sshd@10-139.178.70.109:22-45.119.81.249:36328.service. Jul 10 01:08:56.444590 kernel: kauditd_printk_skb: 349 callbacks suppressed Jul 10 01:08:56.497499 kernel: audit: type=1130 audit(1752109736.405:1452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.109:22-45.119.81.249:36328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:56.497566 kernel: audit: type=1400 audit(1752109736.462:1453): avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:08:56.505934 kernel: audit: type=1400 audit(1752109736.463:1454): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:08:56.505966 kernel: audit: type=1300 audit(1752109736.463:1454): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000635a20 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:08:56.506001 kernel: audit: type=1327 audit(1752109736.463:1454): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:56.512968 kernel: audit: type=1400 audit(1752109736.463:1455): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:08:56.512997 kernel: audit: type=1300 audit(1752109736.463:1455): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0028e7760 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:08:56.518414 kernel: audit: type=1327 audit(1752109736.463:1455): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:56.518444 kernel: audit: type=1300 audit(1752109736.462:1453): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0010e9f40 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:08:56.518461 kernel: audit: type=1327 audit(1752109736.462:1453): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:56.405000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.109:22-45.119.81.249:36328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:56.462000 audit[4374]: AVC avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:08:56.463000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:08:56.463000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000635a20 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:08:56.463000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:56.463000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:08:56.463000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0028e7760 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:08:56.463000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:56.462000 audit[4374]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0010e9f40 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:08:56.462000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:08:58.193516 sshd[4302]: Connection closed by invalid user carlos 80.94.95.115 port 25054 [preauth] Jul 10 01:08:58.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.109:22-80.94.95.115:25054 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:08:58.265659 sshd[4830]: Invalid user ubuntu from 45.119.81.249 port 36328 Jul 10 01:08:58.202628 systemd[1]: sshd@9-139.178.70.109:22-80.94.95.115:25054.service: Deactivated successfully. Jul 10 01:08:58.440665 sshd[4830]: pam_faillock(sshd:auth): User unknown Jul 10 01:08:58.445000 audit[4830]: USER_AUTH pid=4830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:08:58.446428 sshd[4830]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:08:58.446449 sshd[4830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:08:58.446670 sshd[4830]: pam_faillock(sshd:auth): User unknown Jul 10 01:08:58.839476 env[1271]: time="2025-07-10T01:08:58.839313351Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 01:08:59.926119 sshd[4830]: Failed password for invalid user ubuntu from 45.119.81.249 port 36328 ssh2 Jul 10 01:09:00.058147 kubelet[2155]: E0710 01:08:59.999544 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="5.341s" Jul 10 01:09:00.465817 sshd[4830]: Received disconnect from 45.119.81.249 port 36328:11: Bye Bye [preauth] Jul 10 01:09:00.465817 sshd[4830]: Disconnected from invalid user ubuntu 45.119.81.249 port 36328 [preauth] Jul 10 01:09:00.771326 systemd[1]: sshd@10-139.178.70.109:22-45.119.81.249:36328.service: Deactivated successfully. Jul 10 01:09:00.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.109:22-45.119.81.249:36328 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:09:02.215250 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4044231466.mount: Deactivated successfully. Jul 10 01:09:03.634184 env[1271]: time="2025-07-10T01:09:03.634154598Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:09:03.836422 env[1271]: time="2025-07-10T01:09:03.646761815Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:09:03.836422 env[1271]: time="2025-07-10T01:09:03.660353076Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:09:03.836422 env[1271]: time="2025-07-10T01:09:03.671474323Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:09:03.836422 env[1271]: time="2025-07-10T01:09:03.671648121Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 10 01:09:04.303172 kubelet[2155]: E0710 01:09:04.288576 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="3.065s" Jul 10 01:09:04.327322 env[1271]: time="2025-07-10T01:09:04.315194433Z" level=info msg="CreateContainer within sandbox \"05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 01:09:04.339877 env[1271]: time="2025-07-10T01:09:04.339825668Z" level=info msg="CreateContainer within sandbox \"05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316\"" Jul 10 01:09:04.537584 env[1271]: time="2025-07-10T01:09:04.537449454Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 01:09:04.574955 env[1271]: time="2025-07-10T01:09:04.574787686Z" level=info msg="StartContainer for \"c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316\"" Jul 10 01:09:04.614078 systemd[1]: run-containerd-runc-k8s.io-c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316-runc.nG8B1H.mount: Deactivated successfully. Jul 10 01:09:04.673366 systemd[1]: Started cri-containerd-c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316.scope. Jul 10 01:09:04.703016 kernel: kauditd_printk_skb: 3 callbacks suppressed Jul 10 01:09:04.724950 kernel: audit: type=1400 audit(1752109744.691:1459): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.725792 kernel: audit: type=1400 audit(1752109744.691:1460): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.725825 kernel: audit: type=1400 audit(1752109744.691:1461): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.725841 kernel: audit: type=1400 audit(1752109744.691:1462): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.729670 kernel: audit: type=1400 audit(1752109744.691:1463): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.729700 kernel: audit: type=1400 audit(1752109744.691:1464): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.729730 kernel: audit: type=1400 audit(1752109744.691:1465): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.733412 kernel: audit: type=1400 audit(1752109744.691:1466): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.734969 kernel: audit: type=1400 audit(1752109744.691:1467): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.734999 kernel: audit: type=1400 audit(1752109744.691:1468): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.691000 audit: BPF prog-id=228 op=LOAD Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4247 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:04.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338633331656662363132623333383834313832353133346566613131 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4247 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:04.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338633331656662363132623333383834313832353133346566613131 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.702000 audit: BPF prog-id=229 op=LOAD Jul 10 01:09:04.702000 audit[4854]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00028be40 items=0 ppid=4247 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:04.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338633331656662363132623333383834313832353133346566613131 Jul 10 01:09:04.705000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.705000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.705000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.705000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.705000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.705000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.705000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.705000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.705000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.705000 audit: BPF prog-id=230 op=LOAD Jul 10 01:09:04.705000 audit[4854]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00028be88 items=0 ppid=4247 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:04.705000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338633331656662363132623333383834313832353133346566613131 Jul 10 01:09:04.712000 audit: BPF prog-id=230 op=UNLOAD Jul 10 01:09:04.712000 audit: BPF prog-id=229 op=UNLOAD Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { perfmon } for pid=4854 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit[4854]: AVC avc: denied { bpf } for pid=4854 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:04.712000 audit: BPF prog-id=231 op=LOAD Jul 10 01:09:04.712000 audit[4854]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000406298 items=0 ppid=4247 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:04.712000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338633331656662363132623333383834313832353133346566613131 Jul 10 01:09:04.796945 env[1271]: time="2025-07-10T01:09:04.750547802Z" level=info msg="StartContainer for \"c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316\" returns successfully" Jul 10 01:09:05.218623 env[1271]: time="2025-07-10T01:09:05.218416522Z" level=info msg="CreateContainer within sandbox \"c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 01:09:05.223000 audit[4890]: NETFILTER_CFG table=filter:117 family=2 entries=15 op=nft_register_rule pid=4890 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:09:05.223000 audit[4890]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffd049d7c90 a2=0 a3=7ffd049d7c7c items=0 ppid=2305 pid=4890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:05.223000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:09:05.230000 audit[4890]: NETFILTER_CFG table=nat:118 family=2 entries=37 op=nft_register_chain pid=4890 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:09:05.230000 audit[4890]: SYSCALL arch=c000003e syscall=46 success=yes exit=14964 a0=3 a1=7ffd049d7c90 a2=0 a3=7ffd049d7c7c items=0 ppid=2305 pid=4890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:05.230000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:09:05.252359 env[1271]: time="2025-07-10T01:09:05.246504202Z" level=info msg="CreateContainer within sandbox \"c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1\"" Jul 10 01:09:06.785119 env[1271]: time="2025-07-10T01:09:06.776537711Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:09:06.785119 env[1271]: time="2025-07-10T01:09:06.788792515Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:09:06.785119 env[1271]: time="2025-07-10T01:09:06.791524964Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:09:06.785119 env[1271]: time="2025-07-10T01:09:06.794355958Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 01:09:06.785119 env[1271]: time="2025-07-10T01:09:06.794715025Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 10 01:09:06.876653 env[1271]: time="2025-07-10T01:09:06.801467029Z" level=info msg="StartContainer for \"670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1\"" Jul 10 01:09:06.956996 systemd[1]: Started cri-containerd-670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1.scope. Jul 10 01:09:06.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit: BPF prog-id=232 op=LOAD Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4553 pid=4900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:06.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306462616332633638666332613637626131363730666239383936 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4553 pid=4900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:06.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306462616332633638666332613637626131363730666239383936 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit: BPF prog-id=233 op=LOAD Jul 10 01:09:06.994000 audit[4900]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00035ed80 items=0 ppid=4553 pid=4900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:06.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306462616332633638666332613637626131363730666239383936 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit: BPF prog-id=234 op=LOAD Jul 10 01:09:06.994000 audit[4900]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00035edc8 items=0 ppid=4553 pid=4900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:06.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306462616332633638666332613637626131363730666239383936 Jul 10 01:09:06.994000 audit: BPF prog-id=234 op=UNLOAD Jul 10 01:09:06.994000 audit: BPF prog-id=233 op=UNLOAD Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { perfmon } for pid=4900 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit[4900]: AVC avc: denied { bpf } for pid=4900 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:06.994000 audit: BPF prog-id=235 op=LOAD Jul 10 01:09:06.994000 audit[4900]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00035f1d8 items=0 ppid=4553 pid=4900 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:06.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637306462616332633638666332613637626131363730666239383936 Jul 10 01:09:07.065181 env[1271]: time="2025-07-10T01:09:07.034086810Z" level=info msg="StartContainer for \"670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1\" returns successfully" Jul 10 01:09:07.164250 kubelet[2155]: E0710 01:09:07.159059 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.295s" Jul 10 01:09:09.410124 kubelet[2155]: I0710 01:09:09.111667 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-vgp2r" podStartSLOduration=92.747630136 podStartE2EDuration="1m32.747630136s" podCreationTimestamp="2025-07-10 01:07:36 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:08:52.418102106 +0000 UTC m=+80.441437910" watchObservedRunningTime="2025-07-10 01:09:08.747630136 +0000 UTC m=+96.770965931" Jul 10 01:09:09.877034 kubelet[2155]: E0710 01:09:09.877013 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.212s" Jul 10 01:09:09.992970 env[1271]: time="2025-07-10T01:09:09.992892108Z" level=info msg="CreateContainer within sandbox \"00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 01:09:10.337871 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2524294319.mount: Deactivated successfully. Jul 10 01:09:10.431254 env[1271]: time="2025-07-10T01:09:10.372208703Z" level=info msg="CreateContainer within sandbox \"00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"30990a79d622609e6f7a5e4f7349704bb336b06bc8e8ba163ed1af97e8852219\"" Jul 10 01:09:10.681372 env[1271]: time="2025-07-10T01:09:10.679335666Z" level=info msg="StartContainer for \"30990a79d622609e6f7a5e4f7349704bb336b06bc8e8ba163ed1af97e8852219\"" Jul 10 01:09:10.775127 systemd[1]: Started cri-containerd-30990a79d622609e6f7a5e4f7349704bb336b06bc8e8ba163ed1af97e8852219.scope. Jul 10 01:09:10.806656 kernel: kauditd_printk_skb: 110 callbacks suppressed Jul 10 01:09:10.843357 kernel: audit: type=1400 audit(1752109750.801:1497): avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.854222 kernel: audit: type=1300 audit(1752109750.801:1497): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f612c4f9a98 items=0 ppid=4001 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:10.856848 kernel: audit: type=1327 audit(1752109750.801:1497): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330393930613739643632323630396536663761356534663733343937 Jul 10 01:09:10.859377 kernel: audit: type=1400 audit(1752109750.803:1498): avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.859408 kernel: audit: type=1400 audit(1752109750.803:1498): avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.862209 kernel: audit: type=1400 audit(1752109750.803:1498): avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.862234 kernel: audit: type=1400 audit(1752109750.803:1498): avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.862252 kernel: audit: type=1400 audit(1752109750.803:1498): avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.862266 kernel: audit: type=1400 audit(1752109750.803:1498): avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.862279 kernel: audit: type=1400 audit(1752109750.803:1498): avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.801000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.801000 audit[4977]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f612c4f9a98 items=0 ppid=4001 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:10.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330393930613739643632323630396536663761356534663733343937 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.803000 audit: BPF prog-id=236 op=LOAD Jul 10 01:09:10.803000 audit[4977]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c000376e48 items=0 ppid=4001 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:10.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330393930613739643632323630396536663761356534663733343937 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit: BPF prog-id=237 op=LOAD Jul 10 01:09:10.809000 audit[4977]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c000376e98 items=0 ppid=4001 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:10.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330393930613739643632323630396536663761356534663733343937 Jul 10 01:09:10.809000 audit: BPF prog-id=237 op=UNLOAD Jul 10 01:09:10.809000 audit: BPF prog-id=236 op=UNLOAD Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:09:10.809000 audit: BPF prog-id=238 op=LOAD Jul 10 01:09:10.809000 audit[4977]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c000376f28 items=0 ppid=4001 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:10.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330393930613739643632323630396536663761356534663733343937 Jul 10 01:09:10.969164 env[1271]: time="2025-07-10T01:09:10.840056727Z" level=info msg="StartContainer for \"30990a79d622609e6f7a5e4f7349704bb336b06bc8e8ba163ed1af97e8852219\" returns successfully" Jul 10 01:09:11.075113 systemd[1]: run-containerd-runc-k8s.io-30990a79d622609e6f7a5e4f7349704bb336b06bc8e8ba163ed1af97e8852219-runc.ao1eqa.mount: Deactivated successfully. Jul 10 01:09:12.019168 systemd[1]: Started sshd@11-139.178.70.109:22-218.78.46.81:42240.service. Jul 10 01:09:12.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.109:22-218.78.46.81:42240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:09:12.052000 audit[5010]: NETFILTER_CFG table=filter:119 family=2 entries=11 op=nft_register_rule pid=5010 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:09:12.052000 audit[5010]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe190524f0 a2=0 a3=7ffe190524dc items=0 ppid=2305 pid=5010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:12.052000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:09:12.059000 audit[5010]: NETFILTER_CFG table=nat:120 family=2 entries=29 op=nft_register_chain pid=5010 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:09:12.059000 audit[5010]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe190524f0 a2=0 a3=7ffe190524dc items=0 ppid=2305 pid=5010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:12.059000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:09:13.233000 audit[5013]: NETFILTER_CFG table=filter:121 family=2 entries=10 op=nft_register_rule pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:09:13.233000 audit[5013]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe21d72b40 a2=0 a3=7ffe21d72b2c items=0 ppid=2305 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:13.233000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:09:13.238000 audit[5013]: NETFILTER_CFG table=nat:122 family=2 entries=32 op=nft_register_rule pid=5013 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:09:13.238000 audit[5013]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe21d72b40 a2=0 a3=7ffe21d72b2c items=0 ppid=2305 pid=5013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:13.238000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:09:17.448893 sshd[5009]: Connection closed by 218.78.46.81 port 42240 [preauth] Jul 10 01:09:17.571952 kernel: kauditd_printk_skb: 46 callbacks suppressed Jul 10 01:09:17.573707 kernel: audit: type=1131 audit(1752109757.501:1508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.109:22-218.78.46.81:42240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:09:17.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.109:22-218.78.46.81:42240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:09:17.487412 systemd[1]: sshd@11-139.178.70.109:22-218.78.46.81:42240.service: Deactivated successfully. Jul 10 01:09:19.157670 kubelet[2155]: E0710 01:09:18.676806 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.137s" Jul 10 01:09:21.779708 systemd[1]: Started sshd@12-139.178.70.109:22-14.103.115.212:39920.service. Jul 10 01:09:21.899227 kernel: audit: type=1130 audit(1752109761.784:1509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.109:22-14.103.115.212:39920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:09:21.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.109:22-14.103.115.212:39920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:09:27.163000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.510009 kernel: audit: type=1400 audit(1752109767.163:1510): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.519655 kernel: audit: type=1300 audit(1752109767.163:1510): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002777680 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:27.519709 kernel: audit: type=1327 audit(1752109767.163:1510): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:27.521153 kernel: audit: type=1400 audit(1752109767.208:1511): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.522216 kernel: audit: type=1300 audit(1752109767.208:1511): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000faeab0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:27.522255 kernel: audit: type=1327 audit(1752109767.208:1511): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:27.524563 kernel: audit: type=1400 audit(1752109767.451:1513): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.528038 kernel: audit: type=1400 audit(1752109767.451:1512): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.528111 kernel: audit: type=1300 audit(1752109767.451:1512): arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c00807ce10 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:09:27.528132 kernel: audit: type=1327 audit(1752109767.451:1512): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:09:27.163000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002777680 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:27.163000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:27.208000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.208000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000faeab0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:27.208000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:27.451000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.451000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.451000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c00807ce10 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:09:27.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:09:27.451000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c0080ffc20 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:09:27.451000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:09:27.479000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.479000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c0080ffc50 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:09:27.479000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:09:27.502000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.502000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c009e065e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:09:27.502000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:09:27.515000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.515000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c009e06620 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:09:27.515000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:09:27.515000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:27.515000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c0080ffce0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:09:27.515000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:09:30.671000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.109:22-139.178.68.195:55572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:09:30.650699 systemd[1]: Started sshd@13-139.178.70.109:22-139.178.68.195:55572.service. Jul 10 01:09:31.557000 audit[5050]: USER_ACCT pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:09:31.635000 audit[5050]: CRED_ACQ pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:09:31.635000 audit[5050]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff85144c70 a2=3 a3=0 items=0 ppid=1 pid=5050 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:09:31.635000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:09:31.660375 sshd[5050]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:09:31.779186 sshd[5050]: Accepted publickey for core from 139.178.68.195 port 55572 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:09:31.913412 systemd-logind[1256]: New session 10 of user core. Jul 10 01:09:31.917279 systemd[1]: Started session-10.scope. Jul 10 01:09:31.929000 audit[5050]: USER_START pid=5050 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:09:31.956000 audit[5057]: CRED_ACQ pid=5057 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:09:32.726697 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 10 01:09:32.838084 kernel: audit: type=1400 audit(1752109772.720:1524): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:32.857524 kernel: audit: type=1300 audit(1752109772.720:1524): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001fb4d20 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:32.858717 kernel: audit: type=1327 audit(1752109772.720:1524): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:32.862372 kernel: audit: type=1400 audit(1752109772.812:1525): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:32.864236 kernel: audit: type=1300 audit(1752109772.812:1525): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018f9f20 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:32.864266 kernel: audit: type=1327 audit(1752109772.812:1525): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:32.866035 kernel: audit: type=1400 audit(1752109772.844:1526): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:32.872734 kernel: audit: type=1300 audit(1752109772.844:1526): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0018f9f60 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:32.872778 kernel: audit: type=1327 audit(1752109772.844:1526): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:32.872799 kernel: audit: type=1400 audit(1752109772.844:1527): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:32.720000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:32.720000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001fb4d20 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:32.720000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:32.812000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:32.812000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0018f9f20 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:32.812000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:32.844000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:32.844000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0018f9f60 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:32.844000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:32.844000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:09:32.844000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0018f9f80 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:09:32.844000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:09:56.638241 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:09:56.905495 kernel: audit: type=1400 audit(1752109796.605:1528): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:09:56.919798 kernel: audit: type=1300 audit(1752109796.605:1528): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001c7a8a0 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:09:56.926397 kernel: audit: type=1327 audit(1752109796.605:1528): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:56.926449 kernel: audit: type=1400 audit(1752109796.616:1529): avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:09:56.933172 kernel: audit: type=1300 audit(1752109796.616:1529): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001cb6920 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:09:56.938932 kernel: audit: type=1327 audit(1752109796.616:1529): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:56.951501 kernel: audit: type=1400 audit(1752109796.622:1530): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:09:56.969020 kernel: audit: type=1300 audit(1752109796.622:1530): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002be2420 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:09:56.977938 kernel: audit: type=1327 audit(1752109796.622:1530): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:56.605000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:09:56.605000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001c7a8a0 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:09:56.605000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:56.616000 audit[4374]: AVC avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:09:56.616000 audit[4374]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001cb6920 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:09:56.616000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:09:56.622000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:09:56.622000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002be2420 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:09:56.622000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:27.274000 audit[5113]: NETFILTER_CFG table=filter:123 family=2 entries=11 op=nft_register_rule pid=5113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:27.579464 kernel: audit: type=1325 audit(1752109827.274:1531): table=filter:123 family=2 entries=11 op=nft_register_rule pid=5113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:27.611942 kernel: audit: type=1300 audit(1752109827.274:1531): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffffb1742d0 a2=0 a3=7ffffb1742bc items=0 ppid=2305 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:27.625777 kernel: audit: type=1327 audit(1752109827.274:1531): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:27.625833 kernel: audit: type=1325 audit(1752109827.292:1532): table=nat:124 family=2 entries=29 op=nft_unregister_chain pid=5113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:27.625851 kernel: audit: type=1300 audit(1752109827.292:1532): arch=c000003e syscall=46 success=yes exit=6796 a0=3 a1=7ffffb1742d0 a2=0 a3=7ffffb1742bc items=0 ppid=2305 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:27.625871 kernel: audit: type=1327 audit(1752109827.292:1532): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:27.625889 kernel: audit: type=1400 audit(1752109827.512:1533): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.625911 kernel: audit: type=1400 audit(1752109827.515:1534): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.625929 kernel: audit: type=1300 audit(1752109827.515:1534): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0034ce5e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:10:27.625945 kernel: audit: type=1327 audit(1752109827.515:1534): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:27.274000 audit[5113]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffffb1742d0 a2=0 a3=7ffffb1742bc items=0 ppid=2305 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:27.274000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:27.292000 audit[5113]: NETFILTER_CFG table=nat:124 family=2 entries=29 op=nft_unregister_chain pid=5113 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:27.292000 audit[5113]: SYSCALL arch=c000003e syscall=46 success=yes exit=6796 a0=3 a1=7ffffb1742d0 a2=0 a3=7ffffb1742bc items=0 ppid=2305 pid=5113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:27.292000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:27.512000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.515000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.515000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0034ce5e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:10:27.515000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:27.512000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0029006f0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:10:27.512000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:27.599000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.599000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00814ffb0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:10:27.599000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:27.602000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.602000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c008aec090 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:10:27.602000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:27.671000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.671000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c005d96140 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:10:27.671000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:27.671000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.671000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c005d96160 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:10:27.671000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:27.672000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.672000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c008613050 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:10:27.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:27.842000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:27.842000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c008aec1e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:10:27.842000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:10:32.960429 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 10 01:10:33.185623 kernel: audit: type=1400 audit(1752109832.945:1541): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:33.237303 kernel: audit: type=1300 audit(1752109832.945:1541): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0034ce780 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:10:33.250517 kernel: audit: type=1327 audit(1752109832.945:1541): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:33.257752 kernel: audit: type=1400 audit(1752109832.981:1542): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:33.269438 kernel: audit: type=1300 audit(1752109832.981:1542): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0035024a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:10:33.291617 kernel: audit: type=1327 audit(1752109832.981:1542): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:33.301070 kernel: audit: type=1325 audit(1752109833.037:1543): table=filter:125 family=2 entries=13 op=nft_register_rule pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:33.301110 kernel: audit: type=1300 audit(1752109833.037:1543): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe6d2f9550 a2=0 a3=7ffe6d2f953c items=0 ppid=2305 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:33.311268 kernel: audit: type=1327 audit(1752109833.037:1543): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:33.323653 kernel: audit: type=1400 audit(1752109833.044:1544): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:32.945000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:32.945000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0034ce780 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:10:32.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:32.981000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:32.981000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0035024a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:10:32.981000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:33.037000 audit[5116]: NETFILTER_CFG table=filter:125 family=2 entries=13 op=nft_register_rule pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:33.037000 audit[5116]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe6d2f9550 a2=0 a3=7ffe6d2f953c items=0 ppid=2305 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:33.037000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:33.044000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:33.044000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0034ce8c0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:10:33.044000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:33.067000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:10:33.067000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0035026a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:10:33.067000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:10:33.067000 audit[5116]: NETFILTER_CFG table=nat:126 family=2 entries=27 op=nft_unregister_chain pid=5116 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:33.067000 audit[5116]: SYSCALL arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7ffe6d2f9550 a2=0 a3=7ffe6d2f953c items=0 ppid=2305 pid=5116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:33.067000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:37.048000 audit[5119]: NETFILTER_CFG table=filter:127 family=2 entries=17 op=nft_register_rule pid=5119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:37.048000 audit[5119]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd200a4b90 a2=0 a3=7ffd200a4b7c items=0 ppid=2305 pid=5119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:37.048000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:37.077000 audit[5119]: NETFILTER_CFG table=nat:128 family=2 entries=35 op=nft_unregister_chain pid=5119 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:37.077000 audit[5119]: SYSCALL arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffd200a4b90 a2=0 a3=7ffd200a4b7c items=0 ppid=2305 pid=5119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:37.077000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:37.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.109:22-107.174.82.39:42316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:37.334458 systemd[1]: Started sshd@14-139.178.70.109:22-107.174.82.39:42316.service. Jul 10 01:10:40.445014 sshd[5122]: Invalid user ftpuser from 107.174.82.39 port 42316 Jul 10 01:10:40.616501 kernel: kauditd_printk_skb: 15 callbacks suppressed Jul 10 01:10:40.623409 kernel: audit: type=1100 audit(1752109840.603:1550): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ftpuser" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:10:40.603000 audit[5122]: USER_AUTH pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="ftpuser" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:10:40.597910 sshd[5122]: pam_faillock(sshd:auth): User unknown Jul 10 01:10:40.602361 sshd[5122]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:10:40.602391 sshd[5122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.174.82.39 Jul 10 01:10:40.603353 sshd[5122]: pam_faillock(sshd:auth): User unknown Jul 10 01:10:42.868603 sshd[5122]: Failed password for invalid user ftpuser from 107.174.82.39 port 42316 ssh2 Jul 10 01:10:44.034000 audit[5127]: NETFILTER_CFG table=filter:129 family=2 entries=21 op=nft_register_rule pid=5127 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:44.344491 kernel: audit: type=1325 audit(1752109844.034:1551): table=filter:129 family=2 entries=21 op=nft_register_rule pid=5127 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:44.427606 kernel: audit: type=1300 audit(1752109844.034:1551): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe039c24e0 a2=0 a3=7ffe039c24cc items=0 ppid=2305 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:44.431661 kernel: audit: type=1327 audit(1752109844.034:1551): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:44.440765 kernel: audit: type=1325 audit(1752109844.071:1552): table=nat:130 family=2 entries=19 op=nft_unregister_chain pid=5127 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:44.444994 kernel: audit: type=1300 audit(1752109844.071:1552): arch=c000003e syscall=46 success=yes exit=2956 a0=3 a1=7ffe039c24e0 a2=0 a3=0 items=0 ppid=2305 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:44.445039 kernel: audit: type=1327 audit(1752109844.071:1552): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:44.034000 audit[5127]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe039c24e0 a2=0 a3=7ffe039c24cc items=0 ppid=2305 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:44.034000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:44.071000 audit[5127]: NETFILTER_CFG table=nat:130 family=2 entries=19 op=nft_unregister_chain pid=5127 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:10:44.071000 audit[5127]: SYSCALL arch=c000003e syscall=46 success=yes exit=2956 a0=3 a1=7ffe039c24e0 a2=0 a3=0 items=0 ppid=2305 pid=5127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:10:44.071000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:10:44.665840 sshd[5122]: Received disconnect from 107.174.82.39 port 42316:11: Bye Bye [preauth] Jul 10 01:10:44.665840 sshd[5122]: Disconnected from invalid user ftpuser 107.174.82.39 port 42316 [preauth] Jul 10 01:10:44.788209 kernel: audit: type=1131 audit(1752109844.755:1553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.109:22-107.174.82.39:42316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:44.755000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.109:22-107.174.82.39:42316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:44.709941 systemd[1]: sshd@14-139.178.70.109:22-107.174.82.39:42316.service: Deactivated successfully. Jul 10 01:10:56.678000 audit[4374]: AVC avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:10:56.844282 kernel: audit: type=1400 audit(1752109856.678:1554): avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:10:56.855396 kernel: audit: type=1300 audit(1752109856.678:1554): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001cb6000 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:10:56.855475 kernel: audit: type=1327 audit(1752109856.678:1554): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:56.858271 kernel: audit: type=1400 audit(1752109856.678:1555): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:10:56.859735 kernel: audit: type=1300 audit(1752109856.678:1555): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002be2000 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:10:56.859761 kernel: audit: type=1327 audit(1752109856.678:1555): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:56.859785 kernel: audit: type=1400 audit(1752109856.726:1556): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:10:56.859804 kernel: audit: type=1300 audit(1752109856.726:1556): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0012e3a80 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:10:56.859821 kernel: audit: type=1327 audit(1752109856.726:1556): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:56.678000 audit[4374]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001cb6000 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:10:56.678000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:56.678000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:10:56.678000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002be2000 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:10:56.678000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:56.726000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:10:56.726000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0012e3a80 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:10:56.726000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:10:56.965823 systemd[1]: Started sshd@15-139.178.70.109:22-45.119.81.249:42074.service. Jul 10 01:10:57.009440 kernel: audit: type=1130 audit(1752109856.969:1557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.109:22-45.119.81.249:42074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:56.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.109:22-45.119.81.249:42074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:10:58.747838 sshd[5130]: Invalid user sql from 45.119.81.249 port 42074 Jul 10 01:10:58.903681 sshd[5130]: pam_faillock(sshd:auth): User unknown Jul 10 01:10:58.914515 sshd[5130]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:10:58.920344 sshd[5130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:10:58.926020 sshd[5130]: pam_faillock(sshd:auth): User unknown Jul 10 01:10:58.927000 audit[5130]: USER_AUTH pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="sql" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:11:01.224354 sshd[5130]: Failed password for invalid user sql from 45.119.81.249 port 42074 ssh2 Jul 10 01:11:01.883732 sshd[5130]: Received disconnect from 45.119.81.249 port 42074:11: Bye Bye [preauth] Jul 10 01:11:01.883732 sshd[5130]: Disconnected from invalid user sql 45.119.81.249 port 42074 [preauth] Jul 10 01:11:02.537736 systemd[1]: sshd@15-139.178.70.109:22-45.119.81.249:42074.service: Deactivated successfully. Jul 10 01:11:02.802216 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 01:11:02.978459 kernel: audit: type=1131 audit(1752109862.612:1559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.109:22-45.119.81.249:42074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:11:02.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.109:22-45.119.81.249:42074 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:11:15.947326 systemd[1]: Started sshd@16-139.178.70.109:22-218.78.46.81:53783.service. Jul 10 01:11:16.397507 kernel: audit: type=1130 audit(1752109875.976:1560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.109:22-218.78.46.81:53783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:11:15.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.109:22-218.78.46.81:53783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:11:20.842302 sshd[5141]: Invalid user dan from 218.78.46.81 port 53783 Jul 10 01:11:21.216358 sshd[5141]: pam_faillock(sshd:auth): User unknown Jul 10 01:11:21.311603 kernel: audit: type=1100 audit(1752109881.270:1561): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="dan" exe="/usr/sbin/sshd" hostname=218.78.46.81 addr=218.78.46.81 terminal=ssh res=failed' Jul 10 01:11:21.270000 audit[5141]: USER_AUTH pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="dan" exe="/usr/sbin/sshd" hostname=218.78.46.81 addr=218.78.46.81 terminal=ssh res=failed' Jul 10 01:11:21.234658 sshd[5141]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:11:21.246101 sshd[5141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.46.81 Jul 10 01:11:21.259107 sshd[5141]: pam_faillock(sshd:auth): User unknown Jul 10 01:11:22.347859 systemd[1]: sshd@12-139.178.70.109:22-14.103.115.212:39920.service: Deactivated successfully. Jul 10 01:11:22.871195 kernel: audit: type=1131 audit(1752109882.416:1562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.109:22-14.103.115.212:39920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:11:22.416000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.109:22-14.103.115.212:39920 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:11:23.376474 sshd[5141]: Failed password for invalid user dan from 218.78.46.81 port 53783 ssh2 Jul 10 01:11:25.370397 sshd[5141]: Received disconnect from 218.78.46.81 port 53783:11: Bye Bye [preauth] Jul 10 01:11:25.370397 sshd[5141]: Disconnected from invalid user dan 218.78.46.81 port 53783 [preauth] Jul 10 01:11:25.743273 kernel: audit: type=1131 audit(1752109885.601:1563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.109:22-218.78.46.81:53783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:11:25.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.109:22-218.78.46.81:53783 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:11:25.558167 systemd[1]: sshd@16-139.178.70.109:22-218.78.46.81:53783.service: Deactivated successfully. Jul 10 01:11:27.791497 kernel: audit: type=1400 audit(1752109887.767:1564): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:27.975444 kernel: audit: type=1300 audit(1752109887.767:1564): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fb43e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:27.982630 kernel: audit: type=1327 audit(1752109887.767:1564): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:27.982668 kernel: audit: type=1400 audit(1752109887.792:1565): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:27.985475 kernel: audit: type=1300 audit(1752109887.792:1565): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00146e780 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:27.985508 kernel: audit: type=1327 audit(1752109887.792:1565): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:27.985530 kernel: audit: type=1400 audit(1752109887.849:1566): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:27.988641 kernel: audit: type=1300 audit(1752109887.849:1566): arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c008f3fb90 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:11:27.996718 kernel: audit: type=1327 audit(1752109887.849:1566): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:28.003542 kernel: audit: type=1400 audit(1752109887.871:1567): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:27.767000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:27.767000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fb43e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:27.767000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:27.792000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:27.792000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00146e780 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:27.792000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:27.849000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:27.849000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c008f3fb90 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:11:27.849000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:27.871000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:27.871000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c008f3fbc0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:11:27.871000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:27.896000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:27.896000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=67 a1=c011c06960 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:11:27.896000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:28.047000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:28.047000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0054a4f00 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:11:28.047000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:28.105000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:28.105000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c0054a4f20 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:11:28.105000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:28.135000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:28.135000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c011c06ae0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:11:28.135000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:11:33.253708 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 10 01:11:33.488912 kernel: audit: type=1400 audit(1752109893.233:1572): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:33.520444 kernel: audit: type=1300 audit(1752109893.233:1572): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fb47e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:33.533322 kernel: audit: type=1327 audit(1752109893.233:1572): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:33.552896 kernel: audit: type=1400 audit(1752109893.249:1573): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:33.552953 kernel: audit: type=1300 audit(1752109893.249:1573): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001fb4820 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:33.565554 kernel: audit: type=1327 audit(1752109893.249:1573): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:33.565611 kernel: audit: type=1400 audit(1752109893.274:1574): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:33.570657 kernel: audit: type=1300 audit(1752109893.274:1574): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001fb4860 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:33.570693 kernel: audit: type=1327 audit(1752109893.274:1574): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:33.575486 kernel: audit: type=1400 audit(1752109893.359:1575): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:33.233000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:33.233000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c001fb47e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:33.233000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:33.249000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:33.249000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001fb4820 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:33.249000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:33.274000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:33.274000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001fb4860 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:33.274000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:33.359000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:11:33.359000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0018f94e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:11:33.359000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:11:56.776535 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:11:56.893575 kernel: audit: type=1400 audit(1752109916.746:1576): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:11:56.900858 kernel: audit: type=1400 audit(1752109916.746:1577): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:11:56.900921 kernel: audit: type=1300 audit(1752109916.746:1577): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012e2060 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:11:56.904342 kernel: audit: type=1327 audit(1752109916.746:1577): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:56.904386 kernel: audit: type=1300 audit(1752109916.746:1576): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002be2060 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:11:56.906381 kernel: audit: type=1327 audit(1752109916.746:1576): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:56.906426 kernel: audit: type=1400 audit(1752109916.754:1578): avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:11:56.908365 kernel: audit: type=1300 audit(1752109916.754:1578): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001cb61c0 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:11:56.912528 kernel: audit: type=1327 audit(1752109916.754:1578): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:56.746000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:11:56.746000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:11:56.746000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0012e2060 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:11:56.746000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:56.746000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002be2060 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:11:56.746000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:11:56.754000 audit[4374]: AVC avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:11:56.754000 audit[4374]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001cb61c0 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:11:56.754000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:27.881000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.072957 kernel: audit: type=1400 audit(1752109947.881:1579): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.082762 kernel: audit: type=1300 audit(1752109947.881:1579): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0009d8d80 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:28.085148 kernel: audit: type=1327 audit(1752109947.881:1579): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:28.085175 kernel: audit: type=1400 audit(1752109947.899:1580): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.088317 kernel: audit: type=1300 audit(1752109947.899:1580): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0029951e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:28.088361 kernel: audit: type=1327 audit(1752109947.899:1580): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:27.881000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0009d8d80 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:27.881000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:27.899000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:27.899000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0029951e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:27.899000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:28.214000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.214000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c010300dc0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:12:28.222793 kernel: audit: type=1400 audit(1752109948.214:1581): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.222886 kernel: audit: type=1300 audit(1752109948.214:1581): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c010300dc0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:12:28.214000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:28.226486 kernel: audit: type=1327 audit(1752109948.214:1581): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:28.255000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.255000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0128964e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:12:28.263322 kernel: audit: type=1400 audit(1752109948.255:1582): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.255000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:28.259000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.259000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c012d92570 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:12:28.259000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:28.340000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.340000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c012896c30 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:12:28.340000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:28.403000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.403000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c01095d020 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:12:28.403000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:28.433000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:28.433000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c012c73470 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:12:28.433000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:12:28.626281 systemd[1]: Started sshd@17-139.178.70.109:22-45.119.81.249:41922.service. Jul 10 01:12:28.629000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.109:22-45.119.81.249:41922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:12:30.448891 sshd[5189]: Invalid user teamspeak from 45.119.81.249 port 41922 Jul 10 01:12:30.586504 sshd[5189]: pam_faillock(sshd:auth): User unknown Jul 10 01:12:30.595000 audit[5189]: USER_AUTH pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="teamspeak" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:12:30.591013 sshd[5189]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:12:30.591043 sshd[5189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:12:30.592602 sshd[5189]: pam_faillock(sshd:auth): User unknown Jul 10 01:12:32.530422 sshd[5189]: Failed password for invalid user teamspeak from 45.119.81.249 port 41922 ssh2 Jul 10 01:12:33.476365 kernel: kauditd_printk_skb: 16 callbacks suppressed Jul 10 01:12:33.586641 kernel: audit: type=1400 audit(1752109953.471:1589): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:33.609001 kernel: audit: type=1300 audit(1752109953.471:1589): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000a73940 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:33.610918 kernel: audit: type=1327 audit(1752109953.471:1589): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:33.610946 kernel: audit: type=1400 audit(1752109953.484:1590): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:33.613166 kernel: audit: type=1300 audit(1752109953.484:1590): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002994cc0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:33.618091 kernel: audit: type=1327 audit(1752109953.484:1590): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:33.618120 kernel: audit: type=1400 audit(1752109953.541:1591): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:33.618140 kernel: audit: type=1300 audit(1752109953.541:1591): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0034ce3a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:33.620196 kernel: audit: type=1327 audit(1752109953.541:1591): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:33.623624 kernel: audit: type=1400 audit(1752109953.586:1592): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:33.471000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:33.471000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c000a73940 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:33.471000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:33.484000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:33.484000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002994cc0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:33.484000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:33.541000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:33.541000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0034ce3a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:33.541000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:33.586000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:12:33.586000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002994e40 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:12:33.586000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:12:33.759583 sshd[5189]: Received disconnect from 45.119.81.249 port 41922:11: Bye Bye [preauth] Jul 10 01:12:33.817351 sshd[5189]: Disconnected from invalid user teamspeak 45.119.81.249 port 41922 [preauth] Jul 10 01:12:33.884095 systemd[1]: sshd@17-139.178.70.109:22-45.119.81.249:41922.service: Deactivated successfully. Jul 10 01:12:33.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.109:22-45.119.81.249:41922 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:12:45.229174 kernel: kauditd_printk_skb: 3 callbacks suppressed Jul 10 01:12:45.410425 kernel: audit: type=1130 audit(1752109965.217:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.109:22-107.174.82.39:42460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:12:45.217000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.109:22-107.174.82.39:42460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:12:45.206646 systemd[1]: Started sshd@18-139.178.70.109:22-107.174.82.39:42460.service. Jul 10 01:12:46.539153 sshd[5198]: Invalid user user9 from 107.174.82.39 port 42460 Jul 10 01:12:46.890116 sshd[5198]: pam_faillock(sshd:auth): User unknown Jul 10 01:12:46.907819 sshd[5198]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:12:46.946061 kernel: audit: type=1100 audit(1752109966.924:1595): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="user9" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:12:46.924000 audit[5198]: USER_AUTH pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="user9" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:12:46.907853 sshd[5198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.174.82.39 Jul 10 01:12:46.908163 sshd[5198]: pam_faillock(sshd:auth): User unknown Jul 10 01:12:48.746061 sshd[5198]: Failed password for invalid user user9 from 107.174.82.39 port 42460 ssh2 Jul 10 01:12:49.022618 sshd[5198]: Received disconnect from 107.174.82.39 port 42460:11: Bye Bye [preauth] Jul 10 01:12:49.022618 sshd[5198]: Disconnected from invalid user user9 107.174.82.39 port 42460 [preauth] Jul 10 01:12:49.159254 systemd[1]: sshd@18-139.178.70.109:22-107.174.82.39:42460.service: Deactivated successfully. Jul 10 01:12:49.213908 kernel: audit: type=1131 audit(1752109969.173:1596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.109:22-107.174.82.39:42460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:12:49.173000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.109:22-107.174.82.39:42460 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:12:56.829000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:12:57.186479 kernel: audit: type=1400 audit(1752109976.829:1597): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:12:57.285218 kernel: audit: type=1400 audit(1752109976.829:1598): avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:12:57.316347 kernel: audit: type=1300 audit(1752109976.829:1597): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002be2000 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:12:57.327862 kernel: audit: type=1327 audit(1752109976.829:1597): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:57.337100 kernel: audit: type=1300 audit(1752109976.829:1598): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00050f280 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:12:57.344571 kernel: audit: type=1327 audit(1752109976.829:1598): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:57.350932 kernel: audit: type=1400 audit(1752109976.833:1599): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:12:57.350984 kernel: audit: type=1300 audit(1752109976.833:1599): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001c7a080 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:12:57.356591 kernel: audit: type=1327 audit(1752109976.833:1599): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:56.829000 audit[4374]: AVC avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:12:56.829000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002be2000 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:12:56.829000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:56.829000 audit[4374]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00050f280 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:12:56.829000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:12:56.833000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:12:56.833000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001c7a080 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:12:56.833000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:26.096759 systemd[1]: Started sshd@19-139.178.70.109:22-218.78.46.81:37096.service. Jul 10 01:13:26.918203 kernel: audit: type=1130 audit(1752110006.121:1600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.109:22-218.78.46.81:37096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:26.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.109:22-218.78.46.81:37096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:28.199000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.430261 kernel: audit: type=1400 audit(1752110008.199:1601): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.462153 kernel: audit: type=1300 audit(1752110008.199:1601): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c003177470 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:28.462250 kernel: audit: type=1327 audit(1752110008.199:1601): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:28.462274 kernel: audit: type=1400 audit(1752110008.199:1602): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.465625 kernel: audit: type=1300 audit(1752110008.199:1602): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0030b6240 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:28.470256 kernel: audit: type=1327 audit(1752110008.199:1602): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:28.199000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c003177470 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:28.515378 kernel: audit: type=1400 audit(1752110008.485:1603): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.515455 kernel: audit: type=1300 audit(1752110008.485:1603): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c008660600 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:13:28.515477 kernel: audit: type=1327 audit(1752110008.485:1603): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:28.199000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:28.199000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.199000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0030b6240 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:28.199000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:28.485000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.485000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c008660600 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:13:28.485000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:28.569000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.569000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0060bb8e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:13:28.569000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:28.810000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.810000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00850b3b0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:13:28.810000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:28.837000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.837000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00850b650 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:13:28.837000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:28.853000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.853000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c009e077e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:13:28.853000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:28.853000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:28.853000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00850b680 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:13:28.853000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:13:29.907223 sshd[5221]: Connection reset by 218.78.46.81 port 37096 [preauth] Jul 10 01:13:30.002000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.109:22-218.78.46.81:37096 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:29.962921 systemd[1]: sshd@19-139.178.70.109:22-218.78.46.81:37096.service: Deactivated successfully. Jul 10 01:13:33.786000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:33.951448 kernel: kauditd_printk_skb: 16 callbacks suppressed Jul 10 01:13:33.960587 kernel: audit: type=1400 audit(1752110013.786:1610): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:33.965833 kernel: audit: type=1300 audit(1752110013.786:1610): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c003503860 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:33.965885 kernel: audit: type=1327 audit(1752110013.786:1610): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:33.968772 kernel: audit: type=1400 audit(1752110013.806:1611): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:33.971492 kernel: audit: type=1300 audit(1752110013.806:1611): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003503880 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:33.971516 kernel: audit: type=1327 audit(1752110013.806:1611): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:33.975031 kernel: audit: type=1400 audit(1752110013.821:1612): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:33.978797 kernel: audit: type=1300 audit(1752110013.821:1612): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0035038a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:33.978841 kernel: audit: type=1327 audit(1752110013.821:1612): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:33.978858 kernel: audit: type=1400 audit(1752110013.849:1613): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:33.786000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c003503860 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:33.786000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:33.806000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:33.806000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003503880 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:33.806000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:33.821000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:33.821000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0035038a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:33.821000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:33.849000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:13:33.849000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c0030b73e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:13:33.849000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:13:36.502550 sshd[5050]: pam_unix(sshd:session): session closed for user core Jul 10 01:13:36.622000 audit[5050]: USER_END pid=5050 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:36.657000 audit[5050]: CRED_DISP pid=5050 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:36.720000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.109:22-139.178.68.195:55572 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:36.712684 systemd[1]: sshd@13-139.178.70.109:22-139.178.68.195:55572.service: Deactivated successfully. Jul 10 01:13:36.721982 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 01:13:36.722097 systemd[1]: session-10.scope: Consumed 27.599s CPU time. Jul 10 01:13:36.725928 systemd-logind[1256]: Session 10 logged out. Waiting for processes to exit. Jul 10 01:13:36.753388 systemd-logind[1256]: Removed session 10. Jul 10 01:13:38.444421 kubelet[2155]: I0710 01:13:38.444388 2155 reflector.go:556] "Warning: watch ended with error" reflector="pkg/kubelet/config/apiserver.go:66" type="*v1.Pod" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:38.538411 kubelet[2155]: I0710 01:13:38.538385 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:38.592411 kubelet[2155]: I0710 01:13:38.592385 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-proxy\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:38.794339 kubelet[2155]: I0710 01:13:38.794239 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:38.838881 kubelet[2155]: E0710 01:13:38.838805 2155 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316" cmd=["/usr/bin/check-status","-r"] Jul 10 01:13:38.961889 kubelet[2155]: I0710 01:13:38.961859 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:38.992612 kubelet[2155]: I0710 01:13:38.992576 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:38.992801 kubelet[2155]: I0710 01:13:38.992784 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"cni-config\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.007529 kubelet[2155]: I0710 01:13:39.007503 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.025526 kubelet[2155]: I0710 01:13:39.007653 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"node-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.025526 kubelet[2155]: I0710 01:13:39.007721 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.025526 kubelet[2155]: I0710 01:13:39.007748 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.025526 kubelet[2155]: I0710 01:13:39.007775 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.025526 kubelet[2155]: I0710 01:13:39.008064 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.025526 kubelet[2155]: I0710 01:13:39.008084 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.036457 kubelet[2155]: I0710 01:13:39.008112 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.036457 kubelet[2155]: I0710 01:13:39.008147 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.036457 kubelet[2155]: I0710 01:13:39.008159 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.036457 kubelet[2155]: I0710 01:13:39.008178 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"coredns\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.105924 kubelet[2155]: I0710 01:13:39.105897 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.329054 kubelet[2155]: I0710 01:13:39.329009 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.337516 kubelet[2155]: E0710 01:13:39.334007 2155 log.go:32] "ListContainers with filter from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="&ContainerFilter{Id:,State:nil,PodSandboxId:,LabelSelector:map[string]string{},}" Jul 10 01:13:39.399180 kubelet[2155]: I0710 01:13:39.399099 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:13:39.404235 kubelet[2155]: E0710 01:13:39.399158 2155 log.go:32] "Status from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 10 01:13:39.416622 kubelet[2155]: E0710 01:13:38.538580 2155 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Jul 10 01:13:39.494213 kubelet[2155]: E0710 01:13:39.494186 2155 log.go:32] "ListImages with filter from image service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="nil" Jul 10 01:13:39.505076 kubelet[2155]: E0710 01:13:39.494309 2155 kuberuntime_image.go:104] "Failed to list images" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 10 01:13:39.505076 kubelet[2155]: I0710 01:13:39.494320 2155 image_gc_manager.go:230] "Failed to update image list" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 10 01:13:39.768854 kubelet[2155]: E0710 01:13:39.762259 2155 container_log_manager.go:197] "Failed to rotate container logs" err="failed to list containers: rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 10 01:13:39.852516 kubelet[2155]: E0710 01:13:39.852467 2155 kubelet.go:3102] "Container runtime sanity check failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 10 01:13:39.852516 kubelet[2155]: W0710 01:13:39.060052 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@14-139.178.70.109:22-107.174.82.39:42316.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@14-139.178.70.109:22-107.174.82.39:42316.service: no such file or directory Jul 10 01:13:40.102268 kubelet[2155]: E0710 01:13:39.494141 2155 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-10 01:13:39.981545973 +0000 UTC m=+368.004881766 (durationBeforeRetry 500ms). Error: RegisterPlugin error -- failed to get plugin info using RPC GetInfo at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: rpc error: code = DeadlineExceeded desc = context deadline exceeded Jul 10 01:13:41.616502 systemd[1]: Started sshd@20-139.178.70.109:22-139.178.68.195:45316.service. Jul 10 01:13:41.755977 kernel: kauditd_printk_skb: 5 callbacks suppressed Jul 10 01:13:41.763601 kernel: audit: type=1130 audit(1752110021.620:1617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.109:22-139.178.68.195:45316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:41.620000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.109:22-139.178.68.195:45316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:42.066000 audit[5315]: USER_ACCT pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:42.077416 kernel: audit: type=1101 audit(1752110022.066:1618): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:42.077476 kernel: audit: type=1103 audit(1752110022.072:1619): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:42.072000 audit[5315]: CRED_ACQ pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:42.086087 kernel: audit: type=1006 audit(1752110022.072:1620): pid=5315 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 10 01:13:42.087312 kernel: audit: type=1300 audit(1752110022.072:1620): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc204db80 a2=3 a3=0 items=0 ppid=1 pid=5315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:42.087358 kernel: audit: type=1327 audit(1752110022.072:1620): proctitle=737368643A20636F7265205B707269765D Jul 10 01:13:42.072000 audit[5315]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc204db80 a2=3 a3=0 items=0 ppid=1 pid=5315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:13:42.072000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:13:42.120254 sshd[5315]: Accepted publickey for core from 139.178.68.195 port 45316 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:13:42.086295 sshd[5315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:13:42.164800 systemd[1]: Started session-11.scope. Jul 10 01:13:42.165639 systemd-logind[1256]: New session 11 of user core. Jul 10 01:13:42.170000 audit[5315]: USER_START pid=5315 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:42.177078 kernel: audit: type=1105 audit(1752110022.170:1621): pid=5315 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:42.180202 kernel: audit: type=1103 audit(1752110022.175:1622): pid=5317 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:42.175000 audit[5317]: CRED_ACQ pid=5317 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:13:45.034604 kubelet[2155]: W0710 01:13:45.025443 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@15-139.178.70.109:22-45.119.81.249:42074.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@15-139.178.70.109:22-45.119.81.249:42074.service: no such file or directory Jul 10 01:13:45.121165 kubelet[2155]: W0710 01:13:45.038380 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@16-139.178.70.109:22-218.78.46.81:53783.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@16-139.178.70.109:22-218.78.46.81:53783.service: no such file or directory Jul 10 01:13:45.121165 kubelet[2155]: W0710 01:13:45.084054 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@17-139.178.70.109:22-45.119.81.249:41922.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@17-139.178.70.109:22-45.119.81.249:41922.service: no such file or directory Jul 10 01:13:45.121165 kubelet[2155]: W0710 01:13:45.084084 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@18-139.178.70.109:22-107.174.82.39:42460.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@18-139.178.70.109:22-107.174.82.39:42460.service: no such file or directory Jul 10 01:13:45.121165 kubelet[2155]: W0710 01:13:45.084098 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@19-139.178.70.109:22-218.78.46.81:37096.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@19-139.178.70.109:22-218.78.46.81:37096.service: no such file or directory Jul 10 01:13:45.661524 env[1271]: time="2025-07-10T01:13:45.660731883Z" level=info msg="StopPodSandbox for \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\"" Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:47.292 [WARNING][5333] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"1ec13fd4-3912-4c69-8f01-81c69b5d4def", ResourceVersion:"1072", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 7, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc", Pod:"coredns-674b8bbfcf-vgp2r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3ce43feb2bb", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:47.312 [INFO][5333] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:47.313 [INFO][5333] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" iface="eth0" netns="" Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:47.315 [INFO][5333] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:47.315 [INFO][5333] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:48.331 [INFO][5340] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" HandleID="k8s-pod-network.fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:48.340 [INFO][5340] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:48.340 [INFO][5340] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:48.427 [WARNING][5340] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" HandleID="k8s-pod-network.fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:48.427 [INFO][5340] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" HandleID="k8s-pod-network.fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:48.429 [INFO][5340] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:13:48.491289 env[1271]: 2025-07-10 01:13:48.460 [INFO][5333] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:13:48.491289 env[1271]: time="2025-07-10T01:13:48.486629365Z" level=info msg="TearDown network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\" successfully" Jul 10 01:13:48.491289 env[1271]: time="2025-07-10T01:13:48.486667287Z" level=info msg="StopPodSandbox for \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\" returns successfully" Jul 10 01:13:56.206938 kernel: audit: type=1130 audit(1752110036.190:1623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.109:22-45.119.81.249:41770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:56.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.109:22-45.119.81.249:41770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:13:56.183033 systemd[1]: Started sshd@21-139.178.70.109:22-45.119.81.249:41770.service. Jul 10 01:13:56.906000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:13:56.944880 kernel: audit: type=1400 audit(1752110036.906:1624): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:13:56.952052 kernel: audit: type=1300 audit(1752110036.906:1624): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001c7a380 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:13:56.953884 kernel: audit: type=1327 audit(1752110036.906:1624): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:56.953910 kernel: audit: type=1400 audit(1752110036.928:1625): avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:13:56.953931 kernel: audit: type=1300 audit(1752110036.928:1625): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001954020 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:13:56.956132 kernel: audit: type=1327 audit(1752110036.928:1625): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:56.956164 kernel: audit: type=1400 audit(1752110036.928:1626): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:13:56.956188 kernel: audit: type=1300 audit(1752110036.928:1626): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002be22c0 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:13:56.959095 kernel: audit: type=1327 audit(1752110036.928:1626): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:56.906000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001c7a380 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:13:56.906000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:56.928000 audit[4374]: AVC avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:13:56.928000 audit[4374]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001954020 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:13:56.928000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:56.928000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:13:56.928000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002be22c0 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:13:56.928000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:13:57.616730 sshd[5348]: Invalid user osadmin from 45.119.81.249 port 41770 Jul 10 01:13:57.705262 sshd[5348]: pam_faillock(sshd:auth): User unknown Jul 10 01:13:57.713841 sshd[5348]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:13:57.713876 sshd[5348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:13:57.714000 audit[5348]: USER_AUTH pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="osadmin" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:13:57.715515 sshd[5348]: pam_faillock(sshd:auth): User unknown Jul 10 01:13:58.879816 sshd[5348]: Failed password for invalid user osadmin from 45.119.81.249 port 41770 ssh2 Jul 10 01:14:00.142126 sshd[5348]: Received disconnect from 45.119.81.249 port 41770:11: Bye Bye [preauth] Jul 10 01:14:00.156213 sshd[5348]: Disconnected from invalid user osadmin 45.119.81.249 port 41770 [preauth] Jul 10 01:14:00.297954 systemd[1]: sshd@21-139.178.70.109:22-45.119.81.249:41770.service: Deactivated successfully. Jul 10 01:14:00.318000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.109:22-45.119.81.249:41770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:07.548526 sshd[5315]: pam_unix(sshd:session): session closed for user core Jul 10 01:14:07.772739 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:14:07.778425 kernel: audit: type=1106 audit(1752110047.644:1629): pid=5315 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:07.787129 kernel: audit: type=1104 audit(1752110047.649:1630): pid=5315 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:07.787197 kernel: audit: type=1131 audit(1752110047.710:1631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.109:22-139.178.68.195:45316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:07.644000 audit[5315]: USER_END pid=5315 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:07.649000 audit[5315]: CRED_DISP pid=5315 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:07.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.109:22-139.178.68.195:45316 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:07.703918 systemd[1]: sshd@20-139.178.70.109:22-139.178.68.195:45316.service: Deactivated successfully. Jul 10 01:14:07.712071 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 01:14:07.712168 systemd[1]: session-11.scope: Consumed 2.578s CPU time. Jul 10 01:14:07.719253 systemd-logind[1256]: Session 11 logged out. Waiting for processes to exit. Jul 10 01:14:07.748541 systemd-logind[1256]: Removed session 11. Jul 10 01:14:09.379198 kubelet[2155]: W0710 01:14:08.772405 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@21-139.178.70.109:22-45.119.81.249:41770.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@21-139.178.70.109:22-45.119.81.249:41770.service: no such file or directory Jul 10 01:14:11.118107 kubelet[2155]: E0710 01:14:10.703146 2155 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": context deadline exceeded (Client.Timeout exceeded while awaiting headers)" Jul 10 01:14:12.732912 systemd[1]: Started sshd@22-139.178.70.109:22-139.178.68.195:38908.service. Jul 10 01:14:12.922306 kernel: audit: type=1130 audit(1752110052.735:1632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.109:22-139.178.68.195:38908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:12.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.109:22-139.178.68.195:38908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:14:13.534000 audit[5390]: USER_ACCT pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:13.622915 kernel: audit: type=1101 audit(1752110053.534:1633): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:13.647631 kernel: audit: type=1103 audit(1752110053.544:1634): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:13.654189 kernel: audit: type=1006 audit(1752110053.544:1635): pid=5390 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 10 01:14:13.654233 kernel: audit: type=1300 audit(1752110053.544:1635): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea950f600 a2=3 a3=0 items=0 ppid=1 pid=5390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:13.654256 kernel: audit: type=1327 audit(1752110053.544:1635): proctitle=737368643A20636F7265205B707269765D Jul 10 01:14:13.544000 audit[5390]: CRED_ACQ pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:13.544000 audit[5390]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea950f600 a2=3 a3=0 items=0 ppid=1 pid=5390 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:14:13.544000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:14:13.555795 sshd[5390]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:14:13.764178 sshd[5390]: Accepted publickey for core from 139.178.68.195 port 38908 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:14:13.872932 systemd-logind[1256]: New session 12 of user core. Jul 10 01:14:13.892231 systemd[1]: Started session-12.scope. Jul 10 01:14:13.924000 audit[5390]: USER_START pid=5390 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:13.942212 kernel: audit: type=1105 audit(1752110053.924:1636): pid=5390 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:13.972000 audit[5393]: CRED_ACQ pid=5393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:13.977354 kernel: audit: type=1103 audit(1752110053.972:1637): pid=5393 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:14:28.660000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:28.977602 kernel: audit: type=1400 audit(1752110068.660:1638): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:28.995676 kernel: audit: type=1300 audit(1752110068.660:1638): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f0e6f0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:28.995726 kernel: audit: type=1327 audit(1752110068.660:1638): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:28.998462 kernel: audit: type=1400 audit(1752110068.707:1639): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:28.998506 kernel: audit: type=1300 audit(1752110068.707:1639): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0018f91a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:29.001461 kernel: audit: type=1327 audit(1752110068.707:1639): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:28.660000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000f0e6f0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:29.077377 kernel: audit: type=1400 audit(1752110069.045:1640): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:29.080148 kernel: audit: type=1300 audit(1752110069.045:1640): arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c008d5c7e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:14:29.080181 kernel: audit: type=1327 audit(1752110069.045:1640): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:29.090654 kernel: audit: type=1400 audit(1752110069.048:1641): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:28.660000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:28.707000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:28.707000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0018f91a0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:28.707000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:29.045000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:29.045000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c008d5c7e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:14:29.045000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:29.048000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:29.048000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=79 a1=c012a25920 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:14:29.048000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:29.097000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:29.097000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c01062fd40 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:14:29.097000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:29.134000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:29.134000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c01062fd70 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:14:29.134000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:29.208000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:29.208000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c012a259b0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:14:29.208000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:29.221000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:29.221000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c008d5c8a0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:14:29.221000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:14:33.985000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:34.286766 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 10 01:14:34.303816 kernel: audit: type=1400 audit(1752110073.985:1646): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:34.309575 kernel: audit: type=1300 audit(1752110073.985:1646): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027761c0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:34.309624 kernel: audit: type=1327 audit(1752110073.985:1646): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:34.309654 kernel: audit: type=1400 audit(1752110073.985:1647): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:34.312602 kernel: audit: type=1300 audit(1752110073.985:1647): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0018f8300 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:34.312629 kernel: audit: type=1327 audit(1752110073.985:1647): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:34.312655 kernel: audit: type=1400 audit(1752110073.995:1648): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:34.312684 kernel: audit: type=1300 audit(1752110073.995:1648): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0027761e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:34.315846 kernel: audit: type=1327 audit(1752110073.995:1648): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:34.320532 kernel: audit: type=1400 audit(1752110074.033:1649): avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:33.985000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0027761c0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:33.985000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:33.985000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:33.985000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0018f8300 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:33.985000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:33.995000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:33.995000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0027761e0 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:33.995000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:34.033000 audit[1977]: AVC avc: denied { watch } for pid=1977 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:14:34.033000 audit[1977]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002776200 a2=fc6 a3=0 items=0 ppid=1839 pid=1977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:14:34.033000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:14:47.568290 systemd[1]: cri-containerd-fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325.scope: Deactivated successfully. Jul 10 01:14:47.915615 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:14:47.948707 kernel: audit: type=1334 audit(1752110087.588:1650): prog-id=114 op=UNLOAD Jul 10 01:14:47.968545 kernel: audit: type=1334 audit(1752110087.599:1651): prog-id=117 op=UNLOAD Jul 10 01:14:47.968625 kernel: audit: type=1334 audit(1752110087.814:1652): prog-id=73 op=UNLOAD Jul 10 01:14:47.968743 kernel: audit: type=1334 audit(1752110087.814:1653): prog-id=84 op=UNLOAD Jul 10 01:14:47.588000 audit: BPF prog-id=114 op=UNLOAD Jul 10 01:14:47.599000 audit: BPF prog-id=117 op=UNLOAD Jul 10 01:14:47.814000 audit: BPF prog-id=73 op=UNLOAD Jul 10 01:14:47.814000 audit: BPF prog-id=84 op=UNLOAD Jul 10 01:14:48.292301 env[1271]: time="2025-07-10T01:14:47.659365967Z" level=info msg="shim disconnected" id=fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325 Jul 10 01:14:48.292301 env[1271]: time="2025-07-10T01:14:47.659409603Z" level=warning msg="cleaning up after shim disconnected" id=fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325 namespace=k8s.io Jul 10 01:14:48.292301 env[1271]: time="2025-07-10T01:14:47.659418307Z" level=info msg="cleaning up dead shim" Jul 10 01:14:48.292301 env[1271]: time="2025-07-10T01:14:47.667169702Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:14:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5418 runtime=io.containerd.runc.v2\n" Jul 10 01:14:48.292301 env[1271]: time="2025-07-10T01:14:47.824207801Z" level=info msg="shim disconnected" id=ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb Jul 10 01:14:48.292301 env[1271]: time="2025-07-10T01:14:47.824237210Z" level=warning msg="cleaning up after shim disconnected" id=ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb namespace=k8s.io Jul 10 01:14:48.292301 env[1271]: time="2025-07-10T01:14:47.824243459Z" level=info msg="cleaning up dead shim" Jul 10 01:14:48.292301 env[1271]: time="2025-07-10T01:14:47.832957378Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:14:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5443 runtime=io.containerd.runc.v2\n" Jul 10 01:14:47.589501 systemd[1]: cri-containerd-fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325.scope: Consumed 6.996s CPU time. Jul 10 01:14:47.787126 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325-rootfs.mount: Deactivated successfully. Jul 10 01:14:47.788179 systemd[1]: cri-containerd-ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb.scope: Deactivated successfully. Jul 10 01:14:47.788532 systemd[1]: cri-containerd-ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb.scope: Consumed 4.874s CPU time. Jul 10 01:14:47.822834 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb-rootfs.mount: Deactivated successfully. Jul 10 01:14:50.248002 systemd[1]: cri-containerd-fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0.scope: Deactivated successfully. Jul 10 01:14:50.248289 systemd[1]: cri-containerd-fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0.scope: Consumed 3.069s CPU time. Jul 10 01:14:50.268420 kernel: audit: type=1334 audit(1752110090.250:1654): prog-id=77 op=UNLOAD Jul 10 01:14:50.268463 kernel: audit: type=1334 audit(1752110090.250:1655): prog-id=83 op=UNLOAD Jul 10 01:14:50.250000 audit: BPF prog-id=77 op=UNLOAD Jul 10 01:14:50.250000 audit: BPF prog-id=83 op=UNLOAD Jul 10 01:14:50.282383 env[1271]: time="2025-07-10T01:14:50.266128246Z" level=info msg="shim disconnected" id=fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0 Jul 10 01:14:50.282383 env[1271]: time="2025-07-10T01:14:50.266169159Z" level=warning msg="cleaning up after shim disconnected" id=fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0 namespace=k8s.io Jul 10 01:14:50.282383 env[1271]: time="2025-07-10T01:14:50.266175919Z" level=info msg="cleaning up dead shim" Jul 10 01:14:50.282383 env[1271]: time="2025-07-10T01:14:50.272207168Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:14:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5469 runtime=io.containerd.runc.v2\n" Jul 10 01:14:50.264703 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0-rootfs.mount: Deactivated successfully. Jul 10 01:14:56.955000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:14:56.978512 kernel: audit: type=1400 audit(1752110096.955:1656): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:14:56.980358 kernel: audit: type=1400 audit(1752110096.955:1657): avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:14:56.980413 kernel: audit: type=1300 audit(1752110096.955:1657): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001d44000 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:14:56.981783 kernel: audit: type=1327 audit(1752110096.955:1657): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:14:56.983325 kernel: audit: type=1300 audit(1752110096.955:1656): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b6a000 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:14:56.983394 kernel: audit: type=1327 audit(1752110096.955:1656): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:14:56.955000 audit[4374]: AVC avc: denied { watch } for pid=4374 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1265046357/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c324,c368 tclass=file permissive=0 Jul 10 01:14:56.955000 audit[4374]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001d44000 a2=fc6 a3=0 items=0 ppid=3908 pid=4374 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c324,c368 key=(null) Jul 10 01:14:56.992418 kernel: audit: type=1400 audit(1752110096.981:1658): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:14:56.992482 kernel: audit: type=1300 audit(1752110096.981:1658): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0012e32e0 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:14:56.992500 kernel: audit: type=1327 audit(1752110096.981:1658): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:14:56.955000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:14:56.955000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b6a000 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:14:56.955000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:14:56.981000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:14:56.981000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0012e32e0 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:14:56.981000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:14:59.795136 kubelet[2155]: E0710 01:14:59.795107 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="4m54.355s" Jul 10 01:14:59.828598 kubelet[2155]: E0710 01:14:59.795320 2155 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 5m49.189261419s ago; threshold is 3m0s]" Jul 10 01:14:59.976483 kubelet[2155]: E0710 01:14:59.976440 2155 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 5m49.370366392s ago; threshold is 3m0s]" Jul 10 01:15:00.281895 kubelet[2155]: I0710 01:14:59.525306 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-5bb8b6775d-hjglt" podStartSLOduration=340.493469536 podStartE2EDuration="5m51.320200619s" podCreationTimestamp="2025-07-10 01:08:19 +0000 UTC" firstStartedPulling="2025-07-10 01:08:47.992031885 +0000 UTC m=+76.015367677" lastFinishedPulling="2025-07-10 01:08:58.818762964 +0000 UTC m=+86.842098760" observedRunningTime="2025-07-10 01:09:17.878237301 +0000 UTC m=+105.901573099" watchObservedRunningTime="2025-07-10 01:14:10.320200619 +0000 UTC m=+398.343536417" Jul 10 01:15:00.438493 kubelet[2155]: E0710 01:15:00.438414 2155 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 5m49.83235137s ago; threshold is 3m0s]" Jul 10 01:15:00.702812 env[1271]: time="2025-07-10T01:15:00.702124453Z" level=info msg="RemovePodSandbox for \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\"" Jul 10 01:15:00.702812 env[1271]: time="2025-07-10T01:15:00.702153807Z" level=info msg="Forcibly stopping sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\"" Jul 10 01:15:00.726392 kubelet[2155]: I0710 01:14:59.429876 2155 setters.go:618] "Node became not ready" node="localhost" condition={"type":"Ready","status":"False","lastHeartbeatTime":"2025-07-10T01:14:10Z","lastTransitionTime":"2025-07-10T01:14:10Z","reason":"KubeletNotReady","message":"PLEG is not healthy: pleg was last seen active 5m0.019222618s ago; threshold is 3m0s"} Jul 10 01:15:00.776253 systemd[1]: run-containerd-runc-k8s.io-b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511-runc.ObIBQU.mount: Deactivated successfully. Jul 10 01:15:00.785742 systemd[1]: run-containerd-runc-k8s.io-670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1-runc.eVnOeJ.mount: Deactivated successfully. Jul 10 01:15:00.947256 kubelet[2155]: E0710 01:15:00.947231 2155 kubelet.go:2460] "Skipping pod synchronization" err="container runtime is down" Jul 10 01:15:01.135001 kubelet[2155]: E0710 01:15:00.762122 2155 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-10 01:15:01.205068319 +0000 UTC m=+449.228404112 (durationBeforeRetry 1s). Error: RegisterPlugin error -- failed to get plugin info using RPC GetInfo at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: rpc error: code = DeadlineExceeded desc = context deadline exceeded Jul 10 01:15:01.759238 kubelet[2155]: E0710 01:15:01.759190 2155 kubelet.go:2460] "Skipping pod synchronization" err="container runtime is down" Jul 10 01:15:02.757316 systemd[1]: run-containerd-runc-k8s.io-c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316-runc.uE1Jhf.mount: Deactivated successfully. Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:04.237 [WARNING][5591] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"1ec13fd4-3912-4c69-8f01-81c69b5d4def", ResourceVersion:"1072", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 7, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3107f61718b88923aee7ba65750c94ebdea74a1f8b55f1e9dc82f6d2c468aafc", Pod:"coredns-674b8bbfcf-vgp2r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3ce43feb2bb", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:04.301 [INFO][5591] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:04.305 [INFO][5591] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" iface="eth0" netns="" Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:04.305 [INFO][5591] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:04.305 [INFO][5591] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:05.237 [INFO][5644] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" HandleID="k8s-pod-network.fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:05.252 [INFO][5644] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:05.256 [INFO][5644] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:05.348 [WARNING][5644] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" HandleID="k8s-pod-network.fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:05.348 [INFO][5644] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" HandleID="k8s-pod-network.fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Workload="localhost-k8s-coredns--674b8bbfcf--vgp2r-eth0" Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:05.349 [INFO][5644] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:05.389275 env[1271]: 2025-07-10 01:15:05.372 [INFO][5591] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757" Jul 10 01:15:05.389275 env[1271]: time="2025-07-10T01:15:05.391376910Z" level=info msg="TearDown network for sandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\" successfully" Jul 10 01:15:05.592077 env[1271]: time="2025-07-10T01:15:05.429320807Z" level=info msg="RemovePodSandbox \"fbd4a2a219c74345c439c55ac9bdbd7f87429de44e32d87ebc8253b069519757\" returns successfully" Jul 10 01:15:07.188414 sshd[5390]: pam_unix(sshd:session): session closed for user core Jul 10 01:15:07.300383 kernel: audit: type=1106 audit(1752110107.296:1659): pid=5390 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:07.309230 kernel: audit: type=1104 audit(1752110107.303:1660): pid=5390 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:07.296000 audit[5390]: USER_END pid=5390 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:07.352921 kernel: audit: type=1131 audit(1752110107.343:1661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.109:22-139.178.68.195:38908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:07.303000 audit[5390]: CRED_DISP pid=5390 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:07.343000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.109:22-139.178.68.195:38908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:07.337762 systemd[1]: sshd@22-139.178.70.109:22-139.178.68.195:38908.service: Deactivated successfully. Jul 10 01:15:07.360011 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 01:15:07.361317 systemd[1]: session-12.scope: Consumed 3.322s CPU time. Jul 10 01:15:07.368495 systemd-logind[1256]: Session 12 logged out. Waiting for processes to exit. Jul 10 01:15:07.389896 systemd-logind[1256]: Removed session 12. Jul 10 01:15:07.821899 kubelet[2155]: E0710 01:15:07.821807 2155 kubelet.go:2460] "Skipping pod synchronization" err="container runtime is down" Jul 10 01:15:08.054068 env[1271]: time="2025-07-10T01:15:08.054032664Z" level=info msg="StopPodSandbox for \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\"" Jul 10 01:15:08.102471 kubelet[2155]: E0710 01:15:08.102439 2155 controller.go:195] "Failed to update lease" err="Operation cannot be fulfilled on leases.coordination.k8s.io \"localhost\": the object has been modified; please apply your changes to the latest version and try again" Jul 10 01:15:08.317468 kubelet[2155]: I0710 01:15:08.309028 2155 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 01:15:08.327218 kubelet[2155]: I0710 01:15:08.327197 2155 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 01:15:08.559016 kubelet[2155]: I0710 01:15:08.514005 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-w6zc4" podStartSLOduration=395.592425999 podStartE2EDuration="6m50.46739044s" podCreationTimestamp="2025-07-10 01:08:18 +0000 UTC" firstStartedPulling="2025-07-10 01:08:49.549471356 +0000 UTC m=+77.572807149" lastFinishedPulling="2025-07-10 01:09:04.424435795 +0000 UTC m=+92.447771590" observedRunningTime="2025-07-10 01:15:08.467268409 +0000 UTC m=+456.490604202" watchObservedRunningTime="2025-07-10 01:15:08.46739044 +0000 UTC m=+456.490726238" Jul 10 01:15:10.728837 systemd[1]: Started sshd@23-139.178.70.109:22-107.174.82.39:42592.service. Jul 10 01:15:10.874463 kernel: audit: type=1130 audit(1752110110.734:1662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.109:22-107.174.82.39:42592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:10.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.109:22-107.174.82.39:42592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:10.988284 sshd[5761]: Connection closed by 107.174.82.39 port 42592 [preauth] Jul 10 01:15:11.004855 kernel: audit: type=1131 audit(1752110110.992:1663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.109:22-107.174.82.39:42592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:10.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.109:22-107.174.82.39:42592 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:10.988908 systemd[1]: sshd@23-139.178.70.109:22-107.174.82.39:42592.service: Deactivated successfully. Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:10.206 [WARNING][5721] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7bc9b954-a61b-4cce-9f51-d15d6378a7d2", ResourceVersion:"1375", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 7, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164", Pod:"coredns-674b8bbfcf-9zr5h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali961dbdf8a73", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:10.257 [INFO][5721] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:10.262 [INFO][5721] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" iface="eth0" netns="" Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:10.265 [INFO][5721] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:10.265 [INFO][5721] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:11.337 [INFO][5734] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" HandleID="k8s-pod-network.0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:11.349 [INFO][5734] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:11.351 [INFO][5734] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:11.410 [WARNING][5734] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" HandleID="k8s-pod-network.0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:11.410 [INFO][5734] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" HandleID="k8s-pod-network.0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:11.411 [INFO][5734] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:11.463386 env[1271]: 2025-07-10 01:15:11.434 [INFO][5721] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:15:11.523741 env[1271]: time="2025-07-10T01:15:11.466928958Z" level=info msg="TearDown network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\" successfully" Jul 10 01:15:11.523741 env[1271]: time="2025-07-10T01:15:11.466967743Z" level=info msg="StopPodSandbox for \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\" returns successfully" Jul 10 01:15:11.616258 env[1271]: time="2025-07-10T01:15:11.616223378Z" level=info msg="RemovePodSandbox for \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\"" Jul 10 01:15:11.618479 env[1271]: time="2025-07-10T01:15:11.616254490Z" level=info msg="Forcibly stopping sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\"" Jul 10 01:15:11.914808 kubelet[2155]: I0710 01:15:11.914771 2155 scope.go:117] "RemoveContainer" containerID="ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb" Jul 10 01:15:11.954323 env[1271]: time="2025-07-10T01:15:11.954297872Z" level=info msg="StopContainer for \"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413\" with timeout 30 (s)" Jul 10 01:15:11.954729 env[1271]: time="2025-07-10T01:15:11.954714779Z" level=info msg="Stop container \"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413\" with signal terminated" Jul 10 01:15:11.967326 kubelet[2155]: I0710 01:15:11.967306 2155 scope.go:117] "RemoveContainer" containerID="fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0" Jul 10 01:15:11.979000 audit: BPF prog-id=197 op=UNLOAD Jul 10 01:15:11.989579 kernel: audit: type=1334 audit(1752110111.979:1664): prog-id=197 op=UNLOAD Jul 10 01:15:11.979232 systemd[1]: cri-containerd-f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413.scope: Deactivated successfully. Jul 10 01:15:11.979420 systemd[1]: cri-containerd-f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413.scope: Consumed 1.484s CPU time. Jul 10 01:15:12.004164 kubelet[2155]: I0710 01:15:12.003947 2155 scope.go:117] "RemoveContainer" containerID="fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325" Jul 10 01:15:12.019000 audit: BPF prog-id=200 op=UNLOAD Jul 10 01:15:12.024697 kernel: audit: type=1334 audit(1752110112.019:1665): prog-id=200 op=UNLOAD Jul 10 01:15:12.038212 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413-rootfs.mount: Deactivated successfully. Jul 10 01:15:12.040106 env[1271]: time="2025-07-10T01:15:12.040071515Z" level=info msg="shim disconnected" id=f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413 Jul 10 01:15:12.040262 env[1271]: time="2025-07-10T01:15:12.040244235Z" level=warning msg="cleaning up after shim disconnected" id=f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413 namespace=k8s.io Jul 10 01:15:12.040377 env[1271]: time="2025-07-10T01:15:12.040363297Z" level=info msg="cleaning up dead shim" Jul 10 01:15:12.051496 env[1271]: time="2025-07-10T01:15:12.051460031Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:15:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5811 runtime=io.containerd.runc.v2\n" Jul 10 01:15:12.112015 env[1271]: time="2025-07-10T01:15:12.111983025Z" level=info msg="StopContainer for \"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413\" returns successfully" Jul 10 01:15:12.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.109:22-139.178.68.195:58232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:12.156014 systemd[1]: Started sshd@24-139.178.70.109:22-139.178.68.195:58232.service. Jul 10 01:15:12.159366 kernel: audit: type=1130 audit(1752110112.155:1666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.109:22-139.178.68.195:58232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:12.179372 kubelet[2155]: I0710 01:15:12.178942 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e79e65fd-0ab0-4358-b58c-2587e4000fef-calico-apiserver-certs\") pod \"calico-apiserver-65cf5b8cbd-2r9vq\" (UID: \"e79e65fd-0ab0-4358-b58c-2587e4000fef\") " pod="calico-apiserver/calico-apiserver-65cf5b8cbd-2r9vq" Jul 10 01:15:12.179372 kubelet[2155]: I0710 01:15:12.179022 2155 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tkt8w\" (UniqueName: \"kubernetes.io/projected/e79e65fd-0ab0-4358-b58c-2587e4000fef-kube-api-access-tkt8w\") pod \"calico-apiserver-65cf5b8cbd-2r9vq\" (UID: \"e79e65fd-0ab0-4358-b58c-2587e4000fef\") " pod="calico-apiserver/calico-apiserver-65cf5b8cbd-2r9vq" Jul 10 01:15:12.259244 env[1271]: time="2025-07-10T01:15:12.255446455Z" level=info msg="StopPodSandbox for \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\"" Jul 10 01:15:12.259244 env[1271]: time="2025-07-10T01:15:12.255495556Z" level=info msg="Container to stop \"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 10 01:15:12.257647 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88-shm.mount: Deactivated successfully. Jul 10 01:15:12.267173 env[1271]: time="2025-07-10T01:15:12.267095109Z" level=info msg="CreateContainer within sandbox \"2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 10 01:15:12.275534 systemd[1]: Created slice kubepods-besteffort-pode79e65fd_0ab0_4358_b58c_2587e4000fef.slice. Jul 10 01:15:12.276494 env[1271]: time="2025-07-10T01:15:12.276394592Z" level=info msg="CreateContainer within sandbox \"e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 10 01:15:12.289000 audit: BPF prog-id=173 op=UNLOAD Jul 10 01:15:12.293591 kernel: audit: type=1334 audit(1752110112.289:1667): prog-id=173 op=UNLOAD Jul 10 01:15:12.293648 kernel: audit: type=1334 audit(1752110112.292:1668): prog-id=176 op=UNLOAD Jul 10 01:15:12.292000 audit: BPF prog-id=176 op=UNLOAD Jul 10 01:15:12.289440 systemd[1]: cri-containerd-abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88.scope: Deactivated successfully. Jul 10 01:15:12.293790 env[1271]: time="2025-07-10T01:15:12.291584774Z" level=info msg="CreateContainer within sandbox \"186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 10 01:15:12.322066 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88-rootfs.mount: Deactivated successfully. Jul 10 01:15:12.326954 env[1271]: time="2025-07-10T01:15:12.325866767Z" level=info msg="shim disconnected" id=abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88 Jul 10 01:15:12.326954 env[1271]: time="2025-07-10T01:15:12.325902170Z" level=warning msg="cleaning up after shim disconnected" id=abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88 namespace=k8s.io Jul 10 01:15:12.326954 env[1271]: time="2025-07-10T01:15:12.325908956Z" level=info msg="cleaning up dead shim" Jul 10 01:15:12.335124 env[1271]: time="2025-07-10T01:15:12.335085627Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:15:12Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5848 runtime=io.containerd.runc.v2\n" Jul 10 01:15:12.378232 kubelet[2155]: I0710 01:15:12.365632 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-5zmkd" podStartSLOduration=390.404891694 podStartE2EDuration="6m53.365599219s" podCreationTimestamp="2025-07-10 01:08:19 +0000 UTC" firstStartedPulling="2025-07-10 01:08:45.129243581 +0000 UTC m=+73.152579374" lastFinishedPulling="2025-07-10 01:09:08.089951107 +0000 UTC m=+96.113286899" observedRunningTime="2025-07-10 01:15:08.560269927 +0000 UTC m=+456.583605720" watchObservedRunningTime="2025-07-10 01:15:12.365599219 +0000 UTC m=+460.388935019" Jul 10 01:15:12.514494 env[1271]: time="2025-07-10T01:15:12.514391885Z" level=info msg="CreateContainer within sandbox \"186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\"" Jul 10 01:15:12.534734 env[1271]: time="2025-07-10T01:15:12.534702877Z" level=info msg="CreateContainer within sandbox \"e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e\"" Jul 10 01:15:12.546054 env[1271]: time="2025-07-10T01:15:12.546018806Z" level=info msg="CreateContainer within sandbox \"2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183\"" Jul 10 01:15:12.589999 env[1271]: time="2025-07-10T01:15:12.589867481Z" level=info msg="StartContainer for \"081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e\"" Jul 10 01:15:12.605541 env[1271]: time="2025-07-10T01:15:12.605505904Z" level=info msg="StartContainer for \"5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183\"" Jul 10 01:15:12.613360 env[1271]: time="2025-07-10T01:15:12.613315273Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65cf5b8cbd-2r9vq,Uid:e79e65fd-0ab0-4358-b58c-2587e4000fef,Namespace:calico-apiserver,Attempt:0,}" Jul 10 01:15:12.622989 systemd[1]: Started cri-containerd-5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183.scope. Jul 10 01:15:12.636737 env[1271]: time="2025-07-10T01:15:12.636705192Z" level=info msg="StartContainer for \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\"" Jul 10 01:15:12.654566 systemd[1]: Started cri-containerd-081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e.scope. Jul 10 01:15:12.693040 systemd[1]: Started cri-containerd-392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e.scope. Jul 10 01:15:12.719559 kernel: audit: type=1400 audit(1752110112.714:1669): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.730451 kernel: audit: type=1400 audit(1752110112.714:1670): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.730511 kernel: audit: type=1400 audit(1752110112.714:1671): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.735230 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 01:15:12.748112 kernel: audit: type=1400 audit(1752110112.714:1672): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.752180 kernel: audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 Jul 10 01:15:12.755812 kernel: audit: type=1400 audit(1752110112.714:1673): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.758229 kernel: audit: backlog limit exceeded Jul 10 01:15:12.758278 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 01:15:12.759930 kernel: audit: type=1400 audit(1752110112.714:1674): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.714000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.714000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.719000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.719000 audit: BPF prog-id=239 op=LOAD Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2253 pid=5928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323837343835386337613766653138616531323838313161653835 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=2253 pid=5928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323837343835386337613766653138616531323838313161653835 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit: BPF prog-id=240 op=LOAD Jul 10 01:15:12.720000 audit[5928]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001e3000 items=0 ppid=2253 pid=5928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323837343835386337613766653138616531323838313161653835 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit: BPF prog-id=241 op=LOAD Jul 10 01:15:12.720000 audit[5928]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001e3048 items=0 ppid=2253 pid=5928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323837343835386337613766653138616531323838313161653835 Jul 10 01:15:12.720000 audit: BPF prog-id=241 op=UNLOAD Jul 10 01:15:12.720000 audit: BPF prog-id=240 op=UNLOAD Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { perfmon } for pid=5928 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[5928]: AVC avc: denied { bpf } for pid=5928 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit: BPF prog-id=242 op=LOAD Jul 10 01:15:12.720000 audit[5928]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001e3458 items=0 ppid=2253 pid=5928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.720000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339323837343835386337613766653138616531323838313161653835 Jul 10 01:15:12.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.720000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.735000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.735000 audit[5890]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1855 pid=5890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.735000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353333353334353739343566653936313530663239666333306461 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1855 pid=5890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353333353334353739343566653936313530663239666333306461 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit: BPF prog-id=244 op=LOAD Jul 10 01:15:12.736000 audit[5890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000367020 items=0 ppid=1855 pid=5890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353333353334353739343566653936313530663239666333306461 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit: BPF prog-id=245 op=LOAD Jul 10 01:15:12.736000 audit[5890]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000367068 items=0 ppid=1855 pid=5890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353333353334353739343566653936313530663239666333306461 Jul 10 01:15:12.736000 audit: BPF prog-id=245 op=UNLOAD Jul 10 01:15:12.736000 audit: BPF prog-id=244 op=UNLOAD Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { perfmon } for pid=5890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit[5890]: AVC avc: denied { bpf } for pid=5890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.736000 audit: BPF prog-id=246 op=LOAD Jul 10 01:15:12.736000 audit[5890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000367478 items=0 ppid=1855 pid=5890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.736000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563353333353334353739343566653936313530663239666333306461 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.742000 audit: BPF prog-id=247 op=LOAD Jul 10 01:15:12.744000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.744000 audit[5891]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1839 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038316639376436396165313137656462303238303738656437613562 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1839 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038316639376436396165313137656462303238303738656437613562 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit: BPF prog-id=248 op=LOAD Jul 10 01:15:12.745000 audit[5891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c23d0 items=0 ppid=1839 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038316639376436396165313137656462303238303738656437613562 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit: BPF prog-id=249 op=LOAD Jul 10 01:15:12.745000 audit[5891]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c2418 items=0 ppid=1839 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038316639376436396165313137656462303238303738656437613562 Jul 10 01:15:12.745000 audit: BPF prog-id=249 op=UNLOAD Jul 10 01:15:12.745000 audit: BPF prog-id=248 op=UNLOAD Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { perfmon } for pid=5891 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit[5891]: AVC avc: denied { bpf } for pid=5891 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:12.745000 audit: BPF prog-id=250 op=LOAD Jul 10 01:15:12.745000 audit[5891]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c2828 items=0 ppid=1839 pid=5891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3038316639376436396165313137656462303238303738656437613562 Jul 10 01:15:12.868000 audit[5824]: USER_ACCT pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:12.923802 env[1271]: time="2025-07-10T01:15:12.777057416Z" level=info msg="StartContainer for \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\" returns successfully" Jul 10 01:15:12.923802 env[1271]: time="2025-07-10T01:15:12.799697170Z" level=info msg="StartContainer for \"5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183\" returns successfully" Jul 10 01:15:12.923802 env[1271]: time="2025-07-10T01:15:12.806929625Z" level=info msg="StartContainer for \"081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e\" returns successfully" Jul 10 01:15:12.923974 sshd[5824]: Accepted publickey for core from 139.178.68.195 port 58232 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:15:12.944000 audit[5824]: CRED_ACQ pid=5824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:12.945000 audit[5824]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffcff5e0e0 a2=3 a3=0 items=0 ppid=1 pid=5824 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:12.945000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:15:12.964596 sshd[5824]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:15:13.079894 systemd[1]: Started session-13.scope. Jul 10 01:15:13.080809 systemd-logind[1256]: New session 13 of user core. Jul 10 01:15:13.102000 audit[5824]: USER_START pid=5824 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:13.150000 audit[5985]: CRED_ACQ pid=5985 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:13.186415 systemd-networkd[1083]: cali650abb9dcdc: Link DOWN Jul 10 01:15:13.186421 systemd-networkd[1083]: cali650abb9dcdc: Lost carrier Jul 10 01:15:14.566000 audit[6025]: NETFILTER_CFG table=filter:131 family=2 entries=59 op=nft_register_rule pid=6025 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:15:14.566000 audit[6025]: SYSCALL arch=c000003e syscall=46 success=yes exit=9048 a0=3 a1=7ffd3d661410 a2=0 a3=7ffd3d6613fc items=0 ppid=3510 pid=6025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:14.566000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:15:14.567000 audit[6025]: NETFILTER_CFG table=filter:132 family=2 entries=4 op=nft_unregister_chain pid=6025 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:15:14.567000 audit[6025]: SYSCALL arch=c000003e syscall=46 success=yes exit=560 a0=3 a1=7ffd3d661410 a2=0 a3=55a751c1b000 items=0 ppid=3510 pid=6025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:14.567000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:15:17.186407 systemd[1]: Started sshd@25-139.178.70.109:22-45.119.81.249:41610.service. Jul 10 01:15:17.201000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.109:22-45.119.81.249:41610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:19.331178 sshd[6038]: Invalid user student07 from 45.119.81.249 port 41610 Jul 10 01:15:19.619455 kernel: kauditd_printk_skb: 179 callbacks suppressed Jul 10 01:15:19.635080 kernel: audit: type=1100 audit(1752110119.595:1729): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="student07" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:15:19.595000 audit[6038]: USER_AUTH pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="student07" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:15:19.588922 sshd[6038]: pam_faillock(sshd:auth): User unknown Jul 10 01:15:19.595640 sshd[6038]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:15:19.595674 sshd[6038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:15:19.596105 sshd[6038]: pam_faillock(sshd:auth): User unknown Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:13.128 [INFO][5872] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:13.128 [INFO][5872] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" iface="eth0" netns="/var/run/netns/cni-31fcea27-3509-697a-b8e0-49cc357d8f8b" Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:13.132 [INFO][5872] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" iface="eth0" netns="/var/run/netns/cni-31fcea27-3509-697a-b8e0-49cc357d8f8b" Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:13.152 [INFO][5872] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" after=23.562826ms iface="eth0" netns="/var/run/netns/cni-31fcea27-3509-697a-b8e0-49cc357d8f8b" Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:13.152 [INFO][5872] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:13.152 [INFO][5872] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:15.318 [INFO][5994] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:15.360 [INFO][5994] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:15.360 [INFO][5994] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:19.835 [INFO][5994] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:19.917 [INFO][5994] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:19.962 [INFO][5994] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:20.132354 env[1271]: 2025-07-10 01:15:20.050 [INFO][5872] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:15:20.186112 env[1271]: time="2025-07-10T01:15:20.135701217Z" level=info msg="TearDown network for sandbox \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\" successfully" Jul 10 01:15:20.186112 env[1271]: time="2025-07-10T01:15:20.135723781Z" level=info msg="StopPodSandbox for \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\" returns successfully" Jul 10 01:15:20.276662 systemd[1]: run-netns-cni\x2d31fcea27\x2d3509\x2d697a\x2db8e0\x2d49cc357d8f8b.mount: Deactivated successfully. Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:13.099 [WARNING][5774] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"7bc9b954-a61b-4cce-9f51-d15d6378a7d2", ResourceVersion:"1375", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 7, 36, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d70804eface9ff04eaa925ff59e975da67983554aaa56e673d737b2e1925a164", Pod:"coredns-674b8bbfcf-9zr5h", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali961dbdf8a73", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:13.123 [INFO][5774] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:13.123 [INFO][5774] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" iface="eth0" netns="" Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:13.123 [INFO][5774] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:13.123 [INFO][5774] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:15.317 [INFO][5991] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" HandleID="k8s-pod-network.0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:15.360 [INFO][5991] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:20.855 [INFO][5991] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:20.883 [WARNING][5991] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" HandleID="k8s-pod-network.0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:20.883 [INFO][5991] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" HandleID="k8s-pod-network.0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Workload="localhost-k8s-coredns--674b8bbfcf--9zr5h-eth0" Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:20.883 [INFO][5991] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:21.033776 env[1271]: 2025-07-10 01:15:20.969 [INFO][5774] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c" Jul 10 01:15:21.033776 env[1271]: time="2025-07-10T01:15:21.032846052Z" level=info msg="TearDown network for sandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\" successfully" Jul 10 01:15:21.090670 env[1271]: time="2025-07-10T01:15:21.062901258Z" level=info msg="RemovePodSandbox \"0f29e4110baf8e78a28cbaa9b65303ecf5d03e1f924932652e25766c30624e3c\" returns successfully" Jul 10 01:15:21.177732 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 01:15:21.198614 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8319262be03: link becomes ready Jul 10 01:15:21.213901 systemd-networkd[1083]: cali8319262be03: Link UP Jul 10 01:15:21.214054 systemd-networkd[1083]: cali8319262be03: Gained carrier Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:13.104 [INFO][5953] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0 calico-apiserver-65cf5b8cbd- calico-apiserver e79e65fd-0ab0-4358-b58c-2587e4000fef 1151 0 2025-07-10 01:09:12 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:65cf5b8cbd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-65cf5b8cbd-2r9vq eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8319262be03 [] [] }} ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-2r9vq" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:13.109 [INFO][5953] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-2r9vq" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:15.323 [INFO][5996] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" HandleID="k8s-pod-network.ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:15.360 [INFO][5996] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" HandleID="k8s-pod-network.ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000332020), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-65cf5b8cbd-2r9vq", "timestamp":"2025-07-10 01:15:15.317968228 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:15.360 [INFO][5996] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:19.960 [INFO][5996] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:19.972 [INFO][5996] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.568 [INFO][5996] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" host="localhost" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.711 [INFO][5996] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.725 [INFO][5996] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.731 [INFO][5996] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.736 [INFO][5996] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.736 [INFO][5996] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" host="localhost" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.746 [INFO][5996] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6 Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.773 [INFO][5996] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" host="localhost" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.855 [INFO][5996] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.138/26] block=192.168.88.128/26 handle="k8s-pod-network.ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" host="localhost" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.855 [INFO][5996] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.138/26] handle="k8s-pod-network.ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" host="localhost" Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.855 [INFO][5996] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:21.774988 env[1271]: 2025-07-10 01:15:20.859 [INFO][5996] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.138/26] IPv6=[] ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" HandleID="k8s-pod-network.ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" Jul 10 01:15:21.805673 env[1271]: 2025-07-10 01:15:21.066 [INFO][5953] cni-plugin/k8s.go 418: Populated endpoint ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-2r9vq" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0", GenerateName:"calico-apiserver-65cf5b8cbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"e79e65fd-0ab0-4358-b58c-2587e4000fef", ResourceVersion:"1151", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 9, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65cf5b8cbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-65cf5b8cbd-2r9vq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8319262be03", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:15:21.805673 env[1271]: 2025-07-10 01:15:21.097 [INFO][5953] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.138/32] ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-2r9vq" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" Jul 10 01:15:21.805673 env[1271]: 2025-07-10 01:15:21.108 [INFO][5953] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8319262be03 ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-2r9vq" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" Jul 10 01:15:21.805673 env[1271]: 2025-07-10 01:15:21.183 [INFO][5953] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-2r9vq" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" Jul 10 01:15:21.805673 env[1271]: 2025-07-10 01:15:21.188 [INFO][5953] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-2r9vq" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0", GenerateName:"calico-apiserver-65cf5b8cbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"e79e65fd-0ab0-4358-b58c-2587e4000fef", ResourceVersion:"1151", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 9, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65cf5b8cbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6", Pod:"calico-apiserver-65cf5b8cbd-2r9vq", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8319262be03", MAC:"ca:66:db:b6:a5:90", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:15:21.805673 env[1271]: 2025-07-10 01:15:21.771 [INFO][5953] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6" Namespace="calico-apiserver" Pod="calico-apiserver-65cf5b8cbd-2r9vq" WorkloadEndpoint="localhost-k8s-calico--apiserver--65cf5b8cbd--2r9vq-eth0" Jul 10 01:15:21.938716 env[1271]: time="2025-07-10T01:15:21.938671636Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 01:15:21.942964 env[1271]: time="2025-07-10T01:15:21.938699255Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 01:15:21.942964 env[1271]: time="2025-07-10T01:15:21.938706453Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 01:15:21.942964 env[1271]: time="2025-07-10T01:15:21.938895039Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6 pid=6062 runtime=io.containerd.runc.v2 Jul 10 01:15:21.977696 systemd[1]: run-containerd-runc-k8s.io-ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6-runc.JP5KzF.mount: Deactivated successfully. Jul 10 01:15:22.033536 sshd[6038]: Failed password for invalid user student07 from 45.119.81.249 port 41610 ssh2 Jul 10 01:15:22.059533 kernel: audit: type=1400 audit(1752110122.051:1730): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.080239 kernel: audit: type=1400 audit(1752110122.051:1731): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.082776 kernel: audit: type=1400 audit(1752110122.051:1732): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.082809 kernel: audit: type=1400 audit(1752110122.051:1733): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.082942 kernel: audit: type=1400 audit(1752110122.051:1734): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.087748 kernel: audit: type=1400 audit(1752110122.051:1735): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.087783 kernel: audit: type=1400 audit(1752110122.051:1736): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.091108 kernel: audit: type=1400 audit(1752110122.051:1737): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.091143 kernel: audit: type=1400 audit(1752110122.051:1738): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit: BPF prog-id=251 op=LOAD Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=6062 pid=6073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:22.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564373536396237613239306663363466623130383161393066653130 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=6062 pid=6073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:22.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564373536396237613239306663363466623130383161393066653130 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit: BPF prog-id=252 op=LOAD Jul 10 01:15:22.051000 audit[6073]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025c40 items=0 ppid=6062 pid=6073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:22.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564373536396237613239306663363466623130383161393066653130 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit: BPF prog-id=253 op=LOAD Jul 10 01:15:22.051000 audit[6073]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025c88 items=0 ppid=6062 pid=6073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:22.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564373536396237613239306663363466623130383161393066653130 Jul 10 01:15:22.051000 audit: BPF prog-id=253 op=UNLOAD Jul 10 01:15:22.051000 audit: BPF prog-id=252 op=UNLOAD Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { perfmon } for pid=6073 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit[6073]: AVC avc: denied { bpf } for pid=6073 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:22.051000 audit: BPF prog-id=254 op=LOAD Jul 10 01:15:22.051000 audit[6073]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000350098 items=0 ppid=6062 pid=6073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:22.051000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564373536396237613239306663363466623130383161393066653130 Jul 10 01:15:22.038847 systemd[1]: Started cri-containerd-ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6.scope. Jul 10 01:15:22.218619 env[1271]: time="2025-07-10T01:15:22.102065759Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65cf5b8cbd-2r9vq,Uid:e79e65fd-0ab0-4358-b58c-2587e4000fef,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6\"" Jul 10 01:15:22.066276 systemd-resolved[1222]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 01:15:22.511748 systemd-networkd[1083]: cali8319262be03: Gained IPv6LL Jul 10 01:15:22.670000 audit[6103]: NETFILTER_CFG table=filter:133 family=2 entries=57 op=nft_register_chain pid=6103 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:15:22.670000 audit[6103]: SYSCALL arch=c000003e syscall=46 success=yes exit=27796 a0=3 a1=7fff7b7247e0 a2=0 a3=7fff7b7247cc items=0 ppid=3510 pid=6103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:22.670000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:15:24.231000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:24.231000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0004fea60 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:24.231000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:24.235000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:24.235000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000601a40 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:24.235000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:24.574648 sshd[6038]: Received disconnect from 45.119.81.249 port 41610:11: Bye Bye [preauth] Jul 10 01:15:24.574648 sshd[6038]: Disconnected from invalid user student07 45.119.81.249 port 41610 [preauth] Jul 10 01:15:24.672538 systemd[1]: sshd@25-139.178.70.109:22-45.119.81.249:41610.service: Deactivated successfully. Jul 10 01:15:24.698376 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 10 01:15:24.710948 kernel: audit: type=1131 audit(1752110124.677:1751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.109:22-45.119.81.249:41610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:24.677000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.109:22-45.119.81.249:41610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:29.157000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:29.234574 kernel: audit: type=1400 audit(1752110129.157:1752): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:29.234680 kernel: audit: type=1300 audit(1752110129.157:1752): arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c009363500 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:15:29.235521 kernel: audit: type=1327 audit(1752110129.157:1752): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:29.235547 kernel: audit: type=1400 audit(1752110129.210:1753): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:29.235572 kernel: audit: type=1300 audit(1752110129.210:1753): arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c009363530 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:15:29.235646 kernel: audit: type=1327 audit(1752110129.210:1753): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:29.235669 kernel: audit: type=1400 audit(1752110129.223:1754): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:29.235687 kernel: audit: type=1300 audit(1752110129.223:1754): arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0128841e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:15:29.235724 kernel: audit: type=1327 audit(1752110129.223:1754): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:29.157000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c009363500 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:15:29.157000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:29.210000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:29.210000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c009363530 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:15:29.210000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:29.223000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:29.223000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0128841e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:15:29.223000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:29.223000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:29.223000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c012884200 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:15:29.223000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:29.267000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:29.267000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c009363620 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:15:29.267000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:29.283000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:29.283000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c009363650 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:15:29.283000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:15:31.642947 systemd[1]: Started sshd@26-139.178.70.109:22-218.78.46.81:48637.service. Jul 10 01:15:31.748025 kernel: kauditd_printk_skb: 9 callbacks suppressed Jul 10 01:15:31.752808 kernel: audit: type=1130 audit(1752110131.651:1758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-139.178.70.109:22-218.78.46.81:48637 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:31.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-139.178.70.109:22-218.78.46.81:48637 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:31.960675 env[1271]: time="2025-07-10T01:15:31.959788710Z" level=info msg="StopPodSandbox for \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\"" Jul 10 01:15:31.991916 env[1271]: time="2025-07-10T01:15:31.961398095Z" level=info msg="StopPodSandbox for \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\"" Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:34.644 [WARNING][6167] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0", GenerateName:"calico-apiserver-bc9b765d7-", Namespace:"calico-apiserver", SelfLink:"", UID:"5ac12914-69e0-4aa4-80ef-d44295a97977", ResourceVersion:"1780", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bc9b765d7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88", Pod:"calico-apiserver-bc9b765d7-d89jt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali650abb9dcdc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:34.689 [INFO][6167] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:34.691 [INFO][6167] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" iface="eth0" netns="" Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:34.691 [INFO][6167] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:34.691 [INFO][6167] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:35.759 [INFO][6187] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:35.765 [INFO][6187] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:36.048 [INFO][6187] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:36.059 [WARNING][6187] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:36.059 [INFO][6187] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:36.060 [INFO][6187] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:36.089937 env[1271]: 2025-07-10 01:15:36.062 [INFO][6167] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:36.089937 env[1271]: time="2025-07-10T01:15:36.089813166Z" level=info msg="TearDown network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\" successfully" Jul 10 01:15:36.089937 env[1271]: time="2025-07-10T01:15:36.089840266Z" level=info msg="StopPodSandbox for \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\" returns successfully" Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:34.644 [WARNING][6166] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0", GenerateName:"calico-apiserver-bc9b765d7-", Namespace:"calico-apiserver", SelfLink:"", UID:"5ac12914-69e0-4aa4-80ef-d44295a97977", ResourceVersion:"1780", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bc9b765d7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88", Pod:"calico-apiserver-bc9b765d7-d89jt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali650abb9dcdc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:34.689 [INFO][6166] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:34.692 [INFO][6166] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" iface="eth0" netns="" Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:34.692 [INFO][6166] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:34.692 [INFO][6166] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:35.759 [INFO][6189] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:35.765 [INFO][6189] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:35.765 [INFO][6189] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:36.047 [WARNING][6189] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:36.047 [INFO][6189] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:36.048 [INFO][6189] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:36.397268 env[1271]: 2025-07-10 01:15:36.060 [INFO][6166] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:36.397268 env[1271]: time="2025-07-10T01:15:36.090415432Z" level=info msg="TearDown network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\" successfully" Jul 10 01:15:36.397268 env[1271]: time="2025-07-10T01:15:36.090427620Z" level=info msg="StopPodSandbox for \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\" returns successfully" Jul 10 01:15:37.791381 sshd[5824]: pam_unix(sshd:session): session closed for user core Jul 10 01:15:37.869000 audit[5824]: USER_END pid=5824 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:37.894922 kernel: audit: type=1106 audit(1752110137.869:1759): pid=5824 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:37.901356 kernel: audit: type=1104 audit(1752110137.873:1760): pid=5824 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:37.873000 audit[5824]: CRED_DISP pid=5824 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:37.904797 systemd[1]: sshd@24-139.178.70.109:22-139.178.68.195:58232.service: Deactivated successfully. Jul 10 01:15:37.925357 kernel: audit: type=1131 audit(1752110137.913:1761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.109:22-139.178.68.195:58232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:37.913000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.109:22-139.178.68.195:58232 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:37.919268 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 01:15:37.919432 systemd[1]: session-13.scope: Consumed 2.074s CPU time. Jul 10 01:15:37.924149 systemd-logind[1256]: Session 13 logged out. Waiting for processes to exit. Jul 10 01:15:37.947833 systemd-logind[1256]: Removed session 13. Jul 10 01:15:38.482147 kubelet[2155]: W0710 01:15:30.811981 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@25-139.178.70.109:22-45.119.81.249:41610.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@25-139.178.70.109:22-45.119.81.249:41610.service: no such file or directory Jul 10 01:15:38.858287 env[1271]: time="2025-07-10T01:15:38.858238203Z" level=info msg="RemovePodSandbox for \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\"" Jul 10 01:15:38.858648 env[1271]: time="2025-07-10T01:15:38.858280263Z" level=info msg="Forcibly stopping sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\"" Jul 10 01:15:39.184817 kubelet[2155]: E0710 01:15:39.184556 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="26.578s" Jul 10 01:15:39.441206 env[1271]: time="2025-07-10T01:15:39.441096514Z" level=info msg="CreateContainer within sandbox \"ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 01:15:39.548941 kubelet[2155]: I0710 01:15:39.548915 2155 scope.go:117] "RemoveContainer" containerID="f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413" Jul 10 01:15:39.844213 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount471040414.mount: Deactivated successfully. Jul 10 01:15:40.030481 env[1271]: time="2025-07-10T01:15:39.885773227Z" level=info msg="CreateContainer within sandbox \"ed7569b7a290fc64fb1081a90fe1030d877d8165a0cf3c6d99c97ec8b5242cf6\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"85582e43b2bc12e9ed7d96e67fd9445d9372b0dc19676eb4843382259078c468\"" Jul 10 01:15:40.288597 env[1271]: time="2025-07-10T01:15:40.287282391Z" level=info msg="StartContainer for \"85582e43b2bc12e9ed7d96e67fd9445d9372b0dc19676eb4843382259078c468\"" Jul 10 01:15:40.335919 systemd[1]: run-containerd-runc-k8s.io-85582e43b2bc12e9ed7d96e67fd9445d9372b0dc19676eb4843382259078c468-runc.cla1W7.mount: Deactivated successfully. Jul 10 01:15:40.385578 systemd[1]: Started cri-containerd-85582e43b2bc12e9ed7d96e67fd9445d9372b0dc19676eb4843382259078c468.scope. Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.535690 kernel: audit: type=1400 audit(1752110140.430:1762): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.588195 kernel: audit: type=1400 audit(1752110140.430:1763): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.593542 kernel: audit: type=1400 audit(1752110140.430:1764): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.593595 kernel: audit: type=1400 audit(1752110140.430:1765): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.596977 kernel: audit: type=1400 audit(1752110140.430:1766): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.601232 kernel: audit: type=1400 audit(1752110140.430:1767): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.601278 kernel: audit: type=1400 audit(1752110140.430:1768): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.430000 audit: BPF prog-id=255 op=LOAD Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=6062 pid=6242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:40.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835353832653433623262633132653965643764393665363766643934 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=6062 pid=6242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:40.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835353832653433623262633132653965643764393665363766643934 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.431000 audit: BPF prog-id=256 op=LOAD Jul 10 01:15:40.431000 audit[6242]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002f8a10 items=0 ppid=6062 pid=6242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:40.431000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835353832653433623262633132653965643764393665363766643934 Jul 10 01:15:40.432000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.432000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.432000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.432000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.432000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.432000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.432000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.432000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.432000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.432000 audit: BPF prog-id=257 op=LOAD Jul 10 01:15:40.432000 audit[6242]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002f8a58 items=0 ppid=6062 pid=6242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:40.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835353832653433623262633132653965643764393665363766643934 Jul 10 01:15:40.437000 audit: BPF prog-id=257 op=UNLOAD Jul 10 01:15:40.438000 audit: BPF prog-id=256 op=UNLOAD Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { perfmon } for pid=6242 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit[6242]: AVC avc: denied { bpf } for pid=6242 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:15:40.438000 audit: BPF prog-id=258 op=LOAD Jul 10 01:15:40.438000 audit[6242]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0002f8e68 items=0 ppid=6062 pid=6242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:40.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835353832653433623262633132653965643764393665363766643934 Jul 10 01:15:40.707374 env[1271]: time="2025-07-10T01:15:40.484389138Z" level=info msg="StartContainer for \"85582e43b2bc12e9ed7d96e67fd9445d9372b0dc19676eb4843382259078c468\" returns successfully" Jul 10 01:15:42.959063 systemd[1]: Started sshd@27-139.178.70.109:22-139.178.68.195:54062.service. Jul 10 01:15:43.130754 kernel: kauditd_printk_skb: 50 callbacks suppressed Jul 10 01:15:43.134721 kernel: audit: type=1130 audit(1752110142.961:1780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-139.178.70.109:22-139.178.68.195:54062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:42.961000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-139.178.70.109:22-139.178.68.195:54062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:15:44.290000 audit[6289]: USER_ACCT pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:44.415461 kernel: audit: type=1101 audit(1752110144.290:1781): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:44.425059 kernel: audit: type=1103 audit(1752110144.299:1782): pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:44.425146 kernel: audit: type=1006 audit(1752110144.300:1783): pid=6289 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 10 01:15:44.427887 kernel: audit: type=1300 audit(1752110144.300:1783): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6825c380 a2=3 a3=0 items=0 ppid=1 pid=6289 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:44.427915 kernel: audit: type=1327 audit(1752110144.300:1783): proctitle=737368643A20636F7265205B707269765D Jul 10 01:15:44.299000 audit[6289]: CRED_ACQ pid=6289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:44.300000 audit[6289]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6825c380 a2=3 a3=0 items=0 ppid=1 pid=6289 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:44.300000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:15:44.514321 sshd[6289]: Accepted publickey for core from 139.178.68.195 port 54062 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:15:44.319308 sshd[6289]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:15:44.619835 systemd-logind[1256]: New session 14 of user core. Jul 10 01:15:44.628219 systemd[1]: Started session-14.scope. Jul 10 01:15:44.654581 kernel: audit: type=1105 audit(1752110144.639:1784): pid=6289 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:44.639000 audit[6289]: USER_START pid=6289 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:44.676000 audit[6299]: CRED_ACQ pid=6299 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:44.681635 kernel: audit: type=1103 audit(1752110144.676:1785): pid=6299 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:15:44.953000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:44.983524 kernel: audit: type=1400 audit(1752110144.953:1786): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:44.983583 kernel: audit: type=1400 audit(1752110144.953:1787): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:44.953000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:44.953000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a2b280 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:44.953000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:44.953000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00014ea80 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:44.953000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:44.954000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:44.954000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00014ec60 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:44.954000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:44.980000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:15:44.980000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00014eee0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:44.980000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:43.960 [WARNING][6210] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0", GenerateName:"calico-apiserver-bc9b765d7-", Namespace:"calico-apiserver", SelfLink:"", UID:"5ac12914-69e0-4aa4-80ef-d44295a97977", ResourceVersion:"1780", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bc9b765d7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88", Pod:"calico-apiserver-bc9b765d7-d89jt", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali650abb9dcdc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:44.118 [INFO][6210] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:44.121 [INFO][6210] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" iface="eth0" netns="" Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:44.124 [INFO][6210] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:44.124 [INFO][6210] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:47.821 [INFO][6294] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:47.884 [INFO][6294] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:47.884 [INFO][6294] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:48.740 [WARNING][6294] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:48.761 [INFO][6294] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" HandleID="k8s-pod-network.e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:48.922 [INFO][6294] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:15:49.191533 env[1271]: 2025-07-10 01:15:49.069 [INFO][6210] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:15:49.191533 env[1271]: time="2025-07-10T01:15:49.171590667Z" level=info msg="TearDown network for sandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\" successfully" Jul 10 01:15:49.909524 env[1271]: time="2025-07-10T01:15:49.909490535Z" level=info msg="RemovePodSandbox \"e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5\" returns successfully" Jul 10 01:15:50.938000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:15:51.213393 kernel: kauditd_printk_skb: 10 callbacks suppressed Jul 10 01:15:51.238388 kernel: audit: type=1400 audit(1752110150.938:1790): avc: denied { watch } for pid=5932 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:15:51.255992 kernel: audit: type=1300 audit(1752110150.938:1790): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000f224c0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:51.256053 kernel: audit: type=1327 audit(1752110150.938:1790): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:51.256077 kernel: audit: type=1400 audit(1752110150.961:1791): avc: denied { watch } for pid=5932 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:15:51.256098 kernel: audit: type=1300 audit(1752110150.961:1791): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0017fc550 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:51.256114 kernel: audit: type=1327 audit(1752110150.961:1791): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:51.256131 kernel: audit: type=1400 audit(1752110150.993:1792): avc: denied { execute } for pid=6317 comm="kube-controller" name="uds" dev="sda9" ino=7466 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 10 01:15:51.258957 kernel: audit: type=1300 audit(1752110150.993:1792): arch=c000003e syscall=59 success=no exit=-13 a0=c0017fc780 a1=c001906768 a2=c0016b2d00 a3=0 items=0 ppid=5932 pid=6317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:51.263193 kernel: audit: type=1327 audit(1752110150.993:1792): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:50.938000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000f224c0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:50.938000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:50.961000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:15:50.961000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0017fc550 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:50.961000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:50.993000 audit[6317]: AVC avc: denied { execute } for pid=6317 comm="kube-controller" name="uds" dev="sda9" ino=7466 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 10 01:15:50.993000 audit[6317]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c0017fc780 a1=c001906768 a2=c0016b2d00 a3=0 items=0 ppid=5932 pid=6317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:15:50.993000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:15:56.985000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:15:57.386950 kernel: audit: type=1400 audit(1752110156.985:1793): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:15:57.415905 kernel: audit: type=1300 audit(1752110156.985:1793): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0023ac060 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:15:57.421774 kernel: audit: type=1327 audit(1752110156.985:1793): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:15:57.426900 kernel: audit: type=1400 audit(1752110157.002:1794): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:15:57.434597 kernel: audit: type=1300 audit(1752110157.002:1794): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002be2800 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:15:57.434726 kernel: audit: type=1327 audit(1752110157.002:1794): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:15:57.434750 kernel: audit: type=1325 audit(1752110157.296:1795): table=filter:134 family=2 entries=16 op=nft_register_rule pid=6321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:15:57.434775 kernel: audit: type=1300 audit(1752110157.296:1795): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffd4ca1580 a2=0 a3=7fffd4ca156c items=0 ppid=2305 pid=6321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:57.440030 kernel: audit: type=1327 audit(1752110157.296:1795): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:15:56.985000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0023ac060 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:15:56.985000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:15:57.002000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:15:57.002000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002be2800 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:15:57.002000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:15:57.296000 audit[6321]: NETFILTER_CFG table=filter:134 family=2 entries=16 op=nft_register_rule pid=6321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:15:57.296000 audit[6321]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffd4ca1580 a2=0 a3=7fffd4ca156c items=0 ppid=2305 pid=6321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:57.296000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:15:57.761000 audit[6321]: NETFILTER_CFG table=nat:135 family=2 entries=58 op=nft_register_chain pid=6321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:15:57.761000 audit[6321]: SYSCALL arch=c000003e syscall=46 success=yes exit=26044 a0=3 a1=7fffd4ca1580 a2=0 a3=7fffd4ca156c items=0 ppid=2305 pid=6321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:57.770445 kernel: audit: type=1325 audit(1752110157.761:1796): table=nat:135 family=2 entries=58 op=nft_register_chain pid=6321 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:15:57.761000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:15:58.782000 audit[6325]: NETFILTER_CFG table=filter:136 family=2 entries=10 op=nft_register_rule pid=6325 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:15:58.782000 audit[6325]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe26215ad0 a2=0 a3=7ffe26215abc items=0 ppid=2305 pid=6325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:58.782000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:15:58.791000 audit[6325]: NETFILTER_CFG table=nat:137 family=2 entries=24 op=nft_register_rule pid=6325 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:15:58.791000 audit[6325]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffe26215ad0 a2=0 a3=7ffe26215abc items=0 ppid=2305 pid=6325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:15:58.791000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:16:07.045757 systemd[1]: cri-containerd-5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183.scope: Deactivated successfully. Jul 10 01:16:07.527575 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:16:07.547457 kernel: audit: type=1334 audit(1752110167.067:1799): prog-id=246 op=UNLOAD Jul 10 01:16:07.566555 kernel: audit: type=1334 audit(1752110167.074:1800): prog-id=243 op=UNLOAD Jul 10 01:16:07.067000 audit: BPF prog-id=246 op=UNLOAD Jul 10 01:16:07.074000 audit: BPF prog-id=243 op=UNLOAD Jul 10 01:16:07.677935 env[1271]: time="2025-07-10T01:16:07.288381506Z" level=info msg="shim disconnected" id=5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183 Jul 10 01:16:07.677935 env[1271]: time="2025-07-10T01:16:07.288408683Z" level=warning msg="cleaning up after shim disconnected" id=5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183 namespace=k8s.io Jul 10 01:16:07.677935 env[1271]: time="2025-07-10T01:16:07.288414567Z" level=info msg="cleaning up dead shim" Jul 10 01:16:07.677935 env[1271]: time="2025-07-10T01:16:07.293872640Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:16:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6343 runtime=io.containerd.runc.v2\n" Jul 10 01:16:07.075409 systemd[1]: cri-containerd-5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183.scope: Consumed 1.261s CPU time. Jul 10 01:16:07.375477 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183-rootfs.mount: Deactivated successfully. Jul 10 01:16:14.778000 audit[6252]: AVC avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:16:15.081898 kernel: audit: type=1400 audit(1752110174.778:1801): avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:16:15.111401 kernel: audit: type=1300 audit(1752110174.778:1801): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f34780 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:16:15.115655 kernel: audit: type=1327 audit(1752110174.778:1801): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:16:14.778000 audit[6252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f34780 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:16:14.778000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:16:17.365733 systemd[1]: Started sshd@28-139.178.70.109:22-185.156.73.234:57392.service. Jul 10 01:16:17.695384 kernel: audit: type=1130 audit(1752110177.383:1802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-139.178.70.109:22-185.156.73.234:57392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:17.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-139.178.70.109:22-185.156.73.234:57392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:19.759368 sshd[6359]: Connection closed by authenticating user root 185.156.73.234 port 57392 [preauth] Jul 10 01:16:20.001525 kernel: audit: type=1109 audit(1752110179.757:1803): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.156.73.234 addr=185.156.73.234 terminal=ssh res=failed' Jul 10 01:16:20.039838 kernel: audit: type=1131 audit(1752110179.847:1804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-139.178.70.109:22-185.156.73.234:57392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:19.757000 audit[6359]: USER_ERR pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=185.156.73.234 addr=185.156.73.234 terminal=ssh res=failed' Jul 10 01:16:19.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-139.178.70.109:22-185.156.73.234:57392 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:19.838672 systemd[1]: sshd@28-139.178.70.109:22-185.156.73.234:57392.service: Deactivated successfully. Jul 10 01:16:24.284000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:24.502278 kernel: audit: type=1400 audit(1752110184.284:1805): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:24.518087 kernel: audit: type=1400 audit(1752110184.285:1806): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:24.519667 kernel: audit: type=1300 audit(1752110184.285:1806): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f166f0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:24.522608 kernel: audit: type=1327 audit(1752110184.285:1806): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:24.524041 kernel: audit: type=1300 audit(1752110184.284:1805): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00231cac0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:24.524077 kernel: audit: type=1327 audit(1752110184.284:1805): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:24.285000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:24.285000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f166f0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:24.285000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:24.284000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00231cac0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:24.284000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:29.222000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.874414 kernel: audit: type=1400 audit(1752110189.222:1807): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.949211 kernel: audit: type=1400 audit(1752110189.222:1808): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.960130 kernel: audit: type=1300 audit(1752110189.222:1808): arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c00f9c7320 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:16:29.967264 kernel: audit: type=1327 audit(1752110189.222:1808): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:29.970972 kernel: audit: type=1300 audit(1752110189.222:1807): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0091c5050 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:16:29.976872 kernel: audit: type=1327 audit(1752110189.222:1807): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:29.981987 kernel: audit: type=1400 audit(1752110189.341:1809): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.987722 kernel: audit: type=1300 audit(1752110189.341:1809): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00485b460 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:16:29.987761 kernel: audit: type=1327 audit(1752110189.341:1809): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:29.993542 kernel: audit: type=1400 audit(1752110189.412:1810): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.222000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.222000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c00f9c7320 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:16:29.222000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:29.222000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0091c5050 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:16:29.222000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:29.341000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.341000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00485b460 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:16:29.341000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:29.412000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.412000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00485b480 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:16:29.412000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:29.485000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.485000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c0091c5080 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:16:29.485000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:29.500000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:29.500000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c0091c50b0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:16:29.500000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:16:37.991313 systemd[1]: Started sshd@29-139.178.70.109:22-45.119.81.249:41450.service. Jul 10 01:16:38.140930 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:16:38.144885 kernel: audit: type=1130 audit(1752110197.996:1813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-139.178.70.109:22-45.119.81.249:41450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:37.996000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-139.178.70.109:22-45.119.81.249:41450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:39.819907 sshd[6380]: Invalid user teamspeak from 45.119.81.249 port 41450 Jul 10 01:16:40.002936 kernel: audit: type=1100 audit(1752110199.989:1814): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="teamspeak" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:16:39.989000 audit[6380]: USER_AUTH pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="teamspeak" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:16:39.970493 sshd[6380]: pam_faillock(sshd:auth): User unknown Jul 10 01:16:39.979163 sshd[6380]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:16:39.983533 sshd[6380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:16:39.987847 sshd[6380]: pam_faillock(sshd:auth): User unknown Jul 10 01:16:42.119863 sshd[6380]: Failed password for invalid user teamspeak from 45.119.81.249 port 41450 ssh2 Jul 10 01:16:43.287770 sshd[6380]: Received disconnect from 45.119.81.249 port 41450:11: Bye Bye [preauth] Jul 10 01:16:43.287770 sshd[6380]: Disconnected from invalid user teamspeak 45.119.81.249 port 41450 [preauth] Jul 10 01:16:43.477721 kernel: audit: type=1131 audit(1752110203.435:1815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-139.178.70.109:22-45.119.81.249:41450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:43.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-139.178.70.109:22-45.119.81.249:41450 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:43.424302 systemd[1]: sshd@29-139.178.70.109:22-45.119.81.249:41450.service: Deactivated successfully. Jul 10 01:16:44.997000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:45.181564 kernel: audit: type=1400 audit(1752110204.997:1816): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:45.197980 kernel: audit: type=1300 audit(1752110204.997:1816): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00231d9c0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:45.198043 kernel: audit: type=1327 audit(1752110204.997:1816): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:45.198076 kernel: audit: type=1400 audit(1752110205.018:1817): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:45.199579 kernel: audit: type=1300 audit(1752110205.018:1817): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00231d9e0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:45.199608 kernel: audit: type=1327 audit(1752110205.018:1817): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:45.199627 kernel: audit: type=1400 audit(1752110205.036:1818): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:45.199644 kernel: audit: type=1300 audit(1752110205.036:1818): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00114cda0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:45.199670 kernel: audit: type=1327 audit(1752110205.036:1818): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:44.997000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00231d9c0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:44.997000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:45.018000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:45.018000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00231d9e0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:45.018000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:45.036000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:45.036000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00114cda0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:45.036000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:45.058000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:16:45.058000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00114cde0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:16:45.058000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:16:51.047144 kubelet[2155]: I0710 01:15:44.866597 2155 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-stlkr\" (UniqueName: \"kubernetes.io/projected/5ac12914-69e0-4aa4-80ef-d44295a97977-kube-api-access-stlkr\") pod \"5ac12914-69e0-4aa4-80ef-d44295a97977\" (UID: \"5ac12914-69e0-4aa4-80ef-d44295a97977\") " Jul 10 01:16:56.027127 systemd[1]: Started sshd@30-139.178.70.109:22-107.174.82.39:42728.service. Jul 10 01:16:56.213285 kernel: kauditd_printk_skb: 3 callbacks suppressed Jul 10 01:16:56.269950 kernel: audit: type=1130 audit(1752110216.034:1820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-139.178.70.109:22-107.174.82.39:42728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:56.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-139.178.70.109:22-107.174.82.39:42728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:16:57.172111 sshd[6395]: Invalid user oracle from 107.174.82.39 port 42728 Jul 10 01:16:57.817453 kernel: audit: type=1400 audit(1752110217.270:1821): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:16:57.872788 kernel: audit: type=1400 audit(1752110217.270:1822): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:16:57.878538 kernel: audit: type=1300 audit(1752110217.270:1821): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013328a0 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:16:57.882516 kernel: audit: type=1327 audit(1752110217.270:1821): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:16:57.890496 kernel: audit: type=1300 audit(1752110217.270:1822): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00081da00 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:16:57.890549 kernel: audit: type=1327 audit(1752110217.270:1822): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:16:57.270000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:16:57.270000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:16:57.270000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013328a0 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:16:57.270000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:16:57.270000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00081da00 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:16:57.270000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:16:58.039311 sshd[6395]: pam_faillock(sshd:auth): User unknown Jul 10 01:16:58.098832 sshd[6395]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:16:58.557679 update_engine[1257]: I0710 01:16:58.473264 1257 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Jul 10 01:16:58.557679 update_engine[1257]: I0710 01:16:58.480325 1257 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Jul 10 01:16:58.098856 sshd[6395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.174.82.39 Jul 10 01:16:58.617454 update_engine[1257]: I0710 01:16:58.562346 1257 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Jul 10 01:16:58.617454 update_engine[1257]: I0710 01:16:58.608858 1257 omaha_request_params.cc:62] Current group set to lts Jul 10 01:16:58.740066 update_engine[1257]: I0710 01:16:58.739948 1257 update_attempter.cc:499] Already updated boot flags. Skipping. Jul 10 01:16:58.740066 update_engine[1257]: I0710 01:16:58.739964 1257 update_attempter.cc:643] Scheduling an action processor start. Jul 10 01:16:58.740066 update_engine[1257]: I0710 01:16:58.739988 1257 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 10 01:16:58.747668 update_engine[1257]: I0710 01:16:58.747552 1257 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Jul 10 01:16:58.751358 update_engine[1257]: I0710 01:16:58.751152 1257 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 10 01:16:58.751358 update_engine[1257]: I0710 01:16:58.751166 1257 omaha_request_action.cc:271] Request: Jul 10 01:16:58.751358 update_engine[1257]: Jul 10 01:16:58.751358 update_engine[1257]: Jul 10 01:16:58.751358 update_engine[1257]: Jul 10 01:16:58.751358 update_engine[1257]: Jul 10 01:16:58.751358 update_engine[1257]: Jul 10 01:16:58.751358 update_engine[1257]: Jul 10 01:16:58.751358 update_engine[1257]: Jul 10 01:16:58.751358 update_engine[1257]: Jul 10 01:16:58.751358 update_engine[1257]: I0710 01:16:58.751173 1257 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:16:58.909610 update_engine[1257]: I0710 01:16:58.909546 1257 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:16:58.921636 update_engine[1257]: E0710 01:16:58.921514 1257 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:16:58.921636 update_engine[1257]: I0710 01:16:58.921607 1257 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Jul 10 01:16:58.979646 sshd[6395]: pam_faillock(sshd:auth): User unknown Jul 10 01:16:58.983000 audit[6395]: USER_AUTH pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="oracle" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:16:59.067460 kernel: audit: type=1100 audit(1752110218.983:1823): pid=6395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="oracle" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:16:59.086737 locksmithd[1325]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Jul 10 01:17:01.286275 sshd[6395]: Failed password for invalid user oracle from 107.174.82.39 port 42728 ssh2 Jul 10 01:17:04.481701 sshd[6395]: Received disconnect from 107.174.82.39 port 42728:11: Bye Bye [preauth] Jul 10 01:17:04.481701 sshd[6395]: Disconnected from invalid user oracle 107.174.82.39 port 42728 [preauth] Jul 10 01:17:04.756085 kernel: audit: type=1131 audit(1752110224.583:1824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-139.178.70.109:22-107.174.82.39:42728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:17:04.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@30-139.178.70.109:22-107.174.82.39:42728 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:17:04.575409 systemd[1]: sshd@30-139.178.70.109:22-107.174.82.39:42728.service: Deactivated successfully. Jul 10 01:17:09.392731 update_engine[1257]: I0710 01:17:09.351696 1257 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:17:09.841422 update_engine[1257]: I0710 01:17:09.542749 1257 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:17:09.841422 update_engine[1257]: E0710 01:17:09.550731 1257 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:17:09.841422 update_engine[1257]: I0710 01:17:09.563527 1257 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Jul 10 01:17:11.038428 kernel: audit: type=1325 audit(1752110231.021:1825): table=filter:138 family=2 entries=11 op=nft_register_rule pid=6412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:11.129283 kernel: audit: type=1300 audit(1752110231.021:1825): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcd01f45b0 a2=0 a3=7ffcd01f459c items=0 ppid=2305 pid=6412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:11.131461 kernel: audit: type=1327 audit(1752110231.021:1825): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:11.134545 kernel: audit: type=1325 audit(1752110231.042:1826): table=nat:139 family=2 entries=29 op=nft_unregister_chain pid=6412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:11.135756 kernel: audit: type=1300 audit(1752110231.042:1826): arch=c000003e syscall=46 success=yes exit=6796 a0=3 a1=7ffcd01f45b0 a2=0 a3=7ffcd01f459c items=0 ppid=2305 pid=6412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:11.138847 kernel: audit: type=1327 audit(1752110231.042:1826): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:11.021000 audit[6412]: NETFILTER_CFG table=filter:138 family=2 entries=11 op=nft_register_rule pid=6412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:11.021000 audit[6412]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcd01f45b0 a2=0 a3=7ffcd01f459c items=0 ppid=2305 pid=6412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:11.021000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:11.042000 audit[6412]: NETFILTER_CFG table=nat:139 family=2 entries=29 op=nft_unregister_chain pid=6412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:11.042000 audit[6412]: SYSCALL arch=c000003e syscall=46 success=yes exit=6796 a0=3 a1=7ffcd01f45b0 a2=0 a3=7ffcd01f459c items=0 ppid=2305 pid=6412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:11.042000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:14.840000 audit[6252]: AVC avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:17:15.229283 kernel: audit: type=1400 audit(1752110234.840:1827): avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:17:15.310513 kernel: audit: type=1300 audit(1752110234.840:1827): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002a704e0 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:17:15.313347 kernel: audit: type=1327 audit(1752110234.840:1827): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:17:14.840000 audit[6252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002a704e0 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:17:14.840000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:17:20.272000 audit[6414]: NETFILTER_CFG table=filter:140 family=2 entries=12 op=nft_register_rule pid=6414 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:20.808755 kernel: audit: type=1325 audit(1752110240.272:1828): table=filter:140 family=2 entries=12 op=nft_register_rule pid=6414 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:20.866235 kernel: audit: type=1300 audit(1752110240.272:1828): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc965d3c90 a2=0 a3=7ffc965d3c7c items=0 ppid=2305 pid=6414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:20.866308 kernel: audit: type=1327 audit(1752110240.272:1828): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:20.877249 kernel: audit: type=1325 audit(1752110240.323:1829): table=nat:141 family=2 entries=34 op=nft_unregister_chain pid=6414 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:20.882506 kernel: audit: type=1300 audit(1752110240.323:1829): arch=c000003e syscall=46 success=yes exit=9476 a0=3 a1=7ffc965d3c90 a2=0 a3=7ffc965d3c7c items=0 ppid=2305 pid=6414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:20.888465 kernel: audit: type=1327 audit(1752110240.323:1829): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:20.272000 audit[6414]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc965d3c90 a2=0 a3=7ffc965d3c7c items=0 ppid=2305 pid=6414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:20.272000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:20.323000 audit[6414]: NETFILTER_CFG table=nat:141 family=2 entries=34 op=nft_unregister_chain pid=6414 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:20.323000 audit[6414]: SYSCALL arch=c000003e syscall=46 success=yes exit=9476 a0=3 a1=7ffc965d3c90 a2=0 a3=7ffc965d3c7c items=0 ppid=2305 pid=6414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:20.323000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:21.038741 update_engine[1257]: I0710 01:17:20.399468 1257 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:17:21.038741 update_engine[1257]: I0710 01:17:20.575377 1257 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:17:21.038741 update_engine[1257]: E0710 01:17:20.583995 1257 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:17:21.038741 update_engine[1257]: I0710 01:17:20.600390 1257 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Jul 10 01:17:24.563000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:24.828901 kernel: audit: type=1400 audit(1752110244.563:1830): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:24.857381 kernel: audit: type=1300 audit(1752110244.563:1830): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d4c9c0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:24.857470 kernel: audit: type=1327 audit(1752110244.563:1830): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:24.859919 kernel: audit: type=1400 audit(1752110244.656:1831): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:24.563000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000d4c9c0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:24.563000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:24.656000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:24.656000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002aff560 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:24.656000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:24.904000 audit[6416]: NETFILTER_CFG table=filter:142 family=2 entries=13 op=nft_register_rule pid=6416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:24.904000 audit[6416]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc8749d9e0 a2=0 a3=7ffc8749d9cc items=0 ppid=2305 pid=6416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:24.904000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:24.919000 audit[6416]: NETFILTER_CFG table=nat:143 family=2 entries=27 op=nft_unregister_chain pid=6416 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:24.919000 audit[6416]: SYSCALL arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7ffc8749d9e0 a2=0 a3=7ffc8749d9cc items=0 ppid=2305 pid=6416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:24.919000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:30.001000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.409076 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:17:30.442387 kernel: audit: type=1400 audit(1752110250.001:1834): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.453977 kernel: audit: type=1300 audit(1752110250.001:1834): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c008f3f2c0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:17:30.459024 kernel: audit: type=1327 audit(1752110250.001:1834): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:30.459084 kernel: audit: type=1400 audit(1752110250.023:1835): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.463419 kernel: audit: type=1300 audit(1752110250.023:1835): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c008f3f2f0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:17:30.463480 kernel: audit: type=1327 audit(1752110250.023:1835): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:30.463504 kernel: audit: type=1400 audit(1752110250.028:1836): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.463522 kernel: audit: type=1300 audit(1752110250.028:1836): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0104656c0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:17:30.470255 kernel: audit: type=1327 audit(1752110250.028:1836): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:30.478749 kernel: audit: type=1400 audit(1752110250.071:1837): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.001000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c008f3f2c0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:17:30.001000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:30.023000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.023000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c008f3f2f0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:17:30.023000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:30.028000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.028000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0104656c0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:17:30.028000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:30.071000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.071000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0104656e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:17:30.071000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:30.094000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.094000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c008f3f320 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:17:30.094000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:30.168000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:30.168000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0134701e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:17:30.168000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:17:31.332731 update_engine[1257]: I0710 01:17:31.304654 1257 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.408468 1257 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:17:31.548579 update_engine[1257]: E0710 01:17:31.411115 1257 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.411201 1257 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.411207 1257 omaha_request_action.cc:621] Omaha request response: Jul 10 01:17:31.548579 update_engine[1257]: E0710 01:17:31.420471 1257 omaha_request_action.cc:640] Omaha request network transfer failed. Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.420536 1257 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.420542 1257 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.420543 1257 update_attempter.cc:306] Processing Done. Jul 10 01:17:31.548579 update_engine[1257]: E0710 01:17:31.427668 1257 update_attempter.cc:619] Update failed. Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.427695 1257 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.427699 1257 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.427703 1257 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.505131 1257 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.512861 1257 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 10 01:17:31.548579 update_engine[1257]: I0710 01:17:31.512879 1257 omaha_request_action.cc:271] Request: Jul 10 01:17:31.548579 update_engine[1257]: Jul 10 01:17:31.548579 update_engine[1257]: Jul 10 01:17:31.604252 update_engine[1257]: Jul 10 01:17:31.604252 update_engine[1257]: Jul 10 01:17:31.604252 update_engine[1257]: Jul 10 01:17:31.604252 update_engine[1257]: Jul 10 01:17:31.604252 update_engine[1257]: I0710 01:17:31.512888 1257 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 10 01:17:31.604252 update_engine[1257]: I0710 01:17:31.513022 1257 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 10 01:17:31.604252 update_engine[1257]: E0710 01:17:31.513089 1257 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 10 01:17:31.604252 update_engine[1257]: I0710 01:17:31.513135 1257 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 10 01:17:31.604252 update_engine[1257]: I0710 01:17:31.513141 1257 omaha_request_action.cc:621] Omaha request response: Jul 10 01:17:31.604252 update_engine[1257]: I0710 01:17:31.513145 1257 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 10 01:17:31.604252 update_engine[1257]: I0710 01:17:31.513147 1257 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 10 01:17:31.604252 update_engine[1257]: I0710 01:17:31.513149 1257 update_attempter.cc:306] Processing Done. Jul 10 01:17:31.604252 update_engine[1257]: I0710 01:17:31.513156 1257 update_attempter.cc:310] Error event sent. Jul 10 01:17:31.604252 update_engine[1257]: I0710 01:17:31.515854 1257 update_check_scheduler.cc:74] Next update check in 47m38s Jul 10 01:17:31.679955 locksmithd[1325]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Jul 10 01:17:31.679955 locksmithd[1325]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Jul 10 01:17:32.158628 systemd[1]: sshd@26-139.178.70.109:22-218.78.46.81:48637.service: Deactivated successfully. Jul 10 01:17:32.192000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-139.178.70.109:22-218.78.46.81:48637 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:17:40.816819 kernel: kauditd_printk_skb: 9 callbacks suppressed Jul 10 01:17:41.010143 kernel: audit: type=1130 audit(1752110260.800:1841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-139.178.70.109:22-218.78.46.81:60176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:17:40.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-139.178.70.109:22-218.78.46.81:60176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:17:40.791369 systemd[1]: Started sshd@31-139.178.70.109:22-218.78.46.81:60176.service. Jul 10 01:17:45.366000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:45.806455 kernel: audit: type=1400 audit(1752110265.366:1842): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:45.869717 kernel: audit: type=1300 audit(1752110265.366:1842): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c00298d520 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:45.873423 kernel: audit: type=1327 audit(1752110265.366:1842): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:45.882012 kernel: audit: type=1400 audit(1752110265.389:1843): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:45.882056 kernel: audit: type=1300 audit(1752110265.389:1843): arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c00298d540 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:45.890501 kernel: audit: type=1327 audit(1752110265.389:1843): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:45.898590 kernel: audit: type=1400 audit(1752110265.401:1844): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:45.906047 kernel: audit: type=1300 audit(1752110265.401:1844): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00298d560 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:45.916025 kernel: audit: type=1327 audit(1752110265.401:1844): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:45.366000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c00298d520 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:45.366000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:45.389000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:45.389000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c00298d540 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:45.389000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:45.401000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:45.401000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00298d560 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:45.401000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:45.513000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:17:45.513000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00298d5c0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:17:45.513000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:17:45.715000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@31-139.178.70.109:22-218.78.46.81:60176 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:17:46.642511 sshd[6423]: Connection reset by 218.78.46.81 port 60176 [preauth] Jul 10 01:17:45.651175 systemd[1]: sshd@31-139.178.70.109:22-218.78.46.81:60176.service: Deactivated successfully. Jul 10 01:17:47.301110 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 10 01:17:47.608759 kernel: audit: type=1325 audit(1752110267.296:1847): table=filter:144 family=2 entries=15 op=nft_register_rule pid=6427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:47.750924 kernel: audit: type=1300 audit(1752110267.296:1847): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcc5b80590 a2=0 a3=7ffcc5b8057c items=0 ppid=2305 pid=6427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:47.758790 kernel: audit: type=1327 audit(1752110267.296:1847): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:47.768077 kernel: audit: type=1325 audit(1752110267.337:1848): table=nat:145 family=2 entries=25 op=nft_unregister_chain pid=6427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:47.780586 kernel: audit: type=1300 audit(1752110267.337:1848): arch=c000003e syscall=46 success=yes exit=5260 a0=3 a1=7ffcc5b80590 a2=0 a3=7ffcc5b8057c items=0 ppid=2305 pid=6427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:47.796656 kernel: audit: type=1327 audit(1752110267.337:1848): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:47.296000 audit[6427]: NETFILTER_CFG table=filter:144 family=2 entries=15 op=nft_register_rule pid=6427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:47.296000 audit[6427]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcc5b80590 a2=0 a3=7ffcc5b8057c items=0 ppid=2305 pid=6427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:47.296000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:47.337000 audit[6427]: NETFILTER_CFG table=nat:145 family=2 entries=25 op=nft_unregister_chain pid=6427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:47.337000 audit[6427]: SYSCALL arch=c000003e syscall=46 success=yes exit=5260 a0=3 a1=7ffcc5b80590 a2=0 a3=7ffcc5b8057c items=0 ppid=2305 pid=6427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:47.337000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:51.096000 audit[6429]: NETFILTER_CFG table=filter:146 family=2 entries=19 op=nft_register_rule pid=6429 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:51.627701 kernel: audit: type=1325 audit(1752110271.096:1849): table=filter:146 family=2 entries=19 op=nft_register_rule pid=6429 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:51.671197 kernel: audit: type=1300 audit(1752110271.096:1849): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff3b09a380 a2=0 a3=7fff3b09a36c items=0 ppid=2305 pid=6429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:51.678433 kernel: audit: type=1327 audit(1752110271.096:1849): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:51.684993 kernel: audit: type=1325 audit(1752110271.106:1850): table=nat:147 family=2 entries=33 op=nft_unregister_chain pid=6429 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:51.096000 audit[6429]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fff3b09a380 a2=0 a3=7fff3b09a36c items=0 ppid=2305 pid=6429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:51.096000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:51.106000 audit[6429]: NETFILTER_CFG table=nat:147 family=2 entries=33 op=nft_unregister_chain pid=6429 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:17:51.106000 audit[6429]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fff3b09a380 a2=0 a3=7fff3b09a36c items=0 ppid=2305 pid=6429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:17:51.106000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:17:57.520000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:17:57.811997 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:17:57.830105 kernel: audit: type=1400 audit(1752110277.520:1851): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:17:57.830173 kernel: audit: type=1300 audit(1752110277.520:1851): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b6a0e0 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:17:57.834447 kernel: audit: type=1327 audit(1752110277.520:1851): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:17:57.836771 kernel: audit: type=1400 audit(1752110277.527:1852): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:17:57.841674 kernel: audit: type=1300 audit(1752110277.527:1852): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001662180 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:17:57.841703 kernel: audit: type=1327 audit(1752110277.527:1852): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:17:57.520000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b6a0e0 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:17:57.520000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:17:57.527000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:17:57.527000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001662180 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:17:57.527000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:18:04.374931 systemd[1]: Started sshd@32-139.178.70.109:22-45.119.81.249:41294.service. Jul 10 01:18:04.682788 kernel: audit: type=1130 audit(1752110284.383:1853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-139.178.70.109:22-45.119.81.249:41294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:18:04.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-139.178.70.109:22-45.119.81.249:41294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:18:06.420846 sshd[6449]: Invalid user andy from 45.119.81.249 port 41294 Jul 10 01:18:06.586415 sshd[6449]: pam_faillock(sshd:auth): User unknown Jul 10 01:18:06.627319 kernel: audit: type=1100 audit(1752110286.602:1854): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="andy" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:18:06.602000 audit[6449]: USER_AUTH pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="andy" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:18:06.590277 sshd[6449]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:18:06.590310 sshd[6449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:18:06.592605 sshd[6449]: pam_faillock(sshd:auth): User unknown Jul 10 01:18:09.037450 sshd[6449]: Failed password for invalid user andy from 45.119.81.249 port 41294 ssh2 Jul 10 01:18:11.165542 sshd[6449]: Received disconnect from 45.119.81.249 port 41294:11: Bye Bye [preauth] Jul 10 01:18:11.165542 sshd[6449]: Disconnected from invalid user andy 45.119.81.249 port 41294 [preauth] Jul 10 01:18:11.486379 kernel: audit: type=1131 audit(1752110291.335:1855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-139.178.70.109:22-45.119.81.249:41294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:18:11.335000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@32-139.178.70.109:22-45.119.81.249:41294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:18:11.311624 systemd[1]: sshd@32-139.178.70.109:22-45.119.81.249:41294.service: Deactivated successfully. Jul 10 01:18:15.013000 audit[6252]: AVC avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:18:15.596869 kernel: audit: type=1400 audit(1752110295.013:1856): avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:18:15.625753 kernel: audit: type=1300 audit(1752110295.013:1856): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002a70760 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:18:15.632206 kernel: audit: type=1327 audit(1752110295.013:1856): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:18:15.013000 audit[6252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002a70760 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:18:15.013000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:18:25.088000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:25.510615 kernel: audit: type=1400 audit(1752110305.088:1857): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:25.550701 kernel: audit: type=1300 audit(1752110305.088:1857): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003192e70 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:25.553498 kernel: audit: type=1327 audit(1752110305.088:1857): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:25.553533 kernel: audit: type=1400 audit(1752110305.129:1858): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:25.553553 kernel: audit: type=1300 audit(1752110305.129:1858): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00298da40 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:25.557519 kernel: audit: type=1327 audit(1752110305.129:1858): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:25.088000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003192e70 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:25.088000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:25.129000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:25.129000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00298da40 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:25.129000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:30.234000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.463206 kernel: audit: type=1400 audit(1752110310.234:1859): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.473937 kernel: audit: type=1300 audit(1752110310.234:1859): arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0072bdce0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:18:30.476304 kernel: audit: type=1327 audit(1752110310.234:1859): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:30.478875 kernel: audit: type=1400 audit(1752110310.252:1860): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.481531 kernel: audit: type=1300 audit(1752110310.252:1860): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0061dc4a0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:18:30.481572 kernel: audit: type=1327 audit(1752110310.252:1860): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:30.481609 kernel: audit: type=1400 audit(1752110310.358:1861): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.484795 kernel: audit: type=1300 audit(1752110310.358:1861): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c00887ac30 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:18:30.484843 kernel: audit: type=1327 audit(1752110310.358:1861): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:30.484873 kernel: audit: type=1400 audit(1752110310.414:1862): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.234000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4b a1=c0072bdce0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:18:30.234000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:30.252000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.252000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0061dc4a0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:18:30.252000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:30.358000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.358000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c00887ac30 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:18:30.358000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:30.414000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.414000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0052e3be0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:18:30.414000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:30.475000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.475000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c008aecea0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:18:30.475000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:30.519000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:30.519000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0080823c0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:18:30.519000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:18:45.950260 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:18:46.192575 kernel: audit: type=1400 audit(1752110325.926:1865): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:46.229876 kernel: audit: type=1300 audit(1752110325.926:1865): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00231c600 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:46.240680 kernel: audit: type=1327 audit(1752110325.926:1865): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:46.243584 kernel: audit: type=1400 audit(1752110326.005:1866): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:46.243618 kernel: audit: type=1300 audit(1752110326.005:1866): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00214e7a0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:46.246263 kernel: audit: type=1327 audit(1752110326.005:1866): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:46.251509 kernel: audit: type=1400 audit(1752110326.029:1867): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:46.262790 kernel: audit: type=1300 audit(1752110326.029:1867): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00214e7c0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:46.274156 kernel: audit: type=1327 audit(1752110326.029:1867): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:46.274210 kernel: audit: type=1400 audit(1752110326.059:1868): avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:45.926000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:45.926000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00231c600 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:45.926000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:46.005000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:46.005000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00214e7a0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:46.005000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:46.029000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:46.029000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00214e7c0 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:46.029000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:46.059000 audit[5932]: AVC avc: denied { watch } for pid=5932 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:18:46.059000 audit[5932]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00214e800 a2=fc6 a3=0 items=0 ppid=1839 pid=5932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:18:46.059000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:18:57.732000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:18:57.973363 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:18:57.985488 kernel: audit: type=1400 audit(1752110337.732:1869): avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:18:57.988498 kernel: audit: type=1400 audit(1752110337.732:1870): avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:18:57.992529 kernel: audit: type=1300 audit(1752110337.732:1870): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b6a360 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:18:57.992573 kernel: audit: type=1327 audit(1752110337.732:1870): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:18:57.992603 kernel: audit: type=1300 audit(1752110337.732:1869): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013325e0 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:18:57.992638 kernel: audit: type=1327 audit(1752110337.732:1869): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:18:57.732000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:18:57.732000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b6a360 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:18:57.732000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:18:57.732000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013325e0 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:18:57.732000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:19:00.949277 systemd[1]: Started sshd@33-139.178.70.109:22-107.174.82.39:42858.service. Jul 10 01:19:01.143040 kernel: audit: type=1130 audit(1752110340.953:1871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-139.178.70.109:22-107.174.82.39:42858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:00.953000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-139.178.70.109:22-107.174.82.39:42858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:01.658646 sshd[6467]: Invalid user wordpress from 107.174.82.39 port 42858 Jul 10 01:19:01.799088 sshd[6467]: pam_faillock(sshd:auth): User unknown Jul 10 01:19:01.833374 kernel: audit: type=1100 audit(1752110341.807:1872): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wordpress" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:19:01.807000 audit[6467]: USER_AUTH pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="wordpress" exe="/usr/sbin/sshd" hostname=107.174.82.39 addr=107.174.82.39 terminal=ssh res=failed' Jul 10 01:19:01.808684 sshd[6467]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:19:01.808709 sshd[6467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.174.82.39 Jul 10 01:19:01.809028 sshd[6467]: pam_faillock(sshd:auth): User unknown Jul 10 01:19:03.375479 sshd[6467]: Failed password for invalid user wordpress from 107.174.82.39 port 42858 ssh2 Jul 10 01:19:03.699671 sshd[6467]: Received disconnect from 107.174.82.39 port 42858:11: Bye Bye [preauth] Jul 10 01:19:03.699671 sshd[6467]: Disconnected from invalid user wordpress 107.174.82.39 port 42858 [preauth] Jul 10 01:19:03.928545 systemd[1]: sshd@33-139.178.70.109:22-107.174.82.39:42858.service: Deactivated successfully. Jul 10 01:19:04.084027 kernel: audit: type=1131 audit(1752110343.994:1873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-139.178.70.109:22-107.174.82.39:42858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:03.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@33-139.178.70.109:22-107.174.82.39:42858 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:15.386000 audit[6252]: AVC avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:19:15.599581 kernel: audit: type=1400 audit(1752110355.386:1874): avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:19:15.618672 kernel: audit: type=1300 audit(1752110355.386:1874): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0029ba420 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:19:15.618744 kernel: audit: type=1327 audit(1752110355.386:1874): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:19:15.386000 audit[6252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0029ba420 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:19:15.386000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:19:16.642003 systemd[1]: cri-containerd-081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e.scope: Deactivated successfully. Jul 10 01:19:16.874651 kernel: audit: type=1334 audit(1752110356.649:1875): prog-id=247 op=UNLOAD Jul 10 01:19:16.884714 kernel: audit: type=1334 audit(1752110356.653:1876): prog-id=250 op=UNLOAD Jul 10 01:19:16.884777 kernel: audit: type=1334 audit(1752110356.663:1877): prog-id=239 op=UNLOAD Jul 10 01:19:16.884806 kernel: audit: type=1334 audit(1752110356.669:1878): prog-id=242 op=UNLOAD Jul 10 01:19:16.649000 audit: BPF prog-id=247 op=UNLOAD Jul 10 01:19:16.653000 audit: BPF prog-id=250 op=UNLOAD Jul 10 01:19:16.663000 audit: BPF prog-id=239 op=UNLOAD Jul 10 01:19:16.669000 audit: BPF prog-id=242 op=UNLOAD Jul 10 01:19:16.919524 env[1271]: time="2025-07-10T01:19:16.699030749Z" level=info msg="shim disconnected" id=392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e Jul 10 01:19:16.919524 env[1271]: time="2025-07-10T01:19:16.699067901Z" level=warning msg="cleaning up after shim disconnected" id=392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e namespace=k8s.io Jul 10 01:19:16.919524 env[1271]: time="2025-07-10T01:19:16.699075085Z" level=info msg="cleaning up dead shim" Jul 10 01:19:16.919524 env[1271]: time="2025-07-10T01:19:16.699481429Z" level=info msg="shim disconnected" id=081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e Jul 10 01:19:16.919524 env[1271]: time="2025-07-10T01:19:16.699497550Z" level=warning msg="cleaning up after shim disconnected" id=081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e namespace=k8s.io Jul 10 01:19:16.919524 env[1271]: time="2025-07-10T01:19:16.699503024Z" level=info msg="cleaning up dead shim" Jul 10 01:19:16.919524 env[1271]: time="2025-07-10T01:19:16.706135445Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:19:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6498 runtime=io.containerd.runc.v2\n" Jul 10 01:19:16.919524 env[1271]: time="2025-07-10T01:19:16.707180009Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:19:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6499 runtime=io.containerd.runc.v2\n" Jul 10 01:19:16.650920 systemd[1]: cri-containerd-081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e.scope: Consumed 3.658s CPU time. Jul 10 01:19:16.664576 systemd[1]: cri-containerd-392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e.scope: Deactivated successfully. Jul 10 01:19:16.664745 systemd[1]: cri-containerd-392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e.scope: Consumed 5.713s CPU time. Jul 10 01:19:16.738776 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e-rootfs.mount: Deactivated successfully. Jul 10 01:19:16.738858 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e-rootfs.mount: Deactivated successfully. Jul 10 01:19:18.396792 sshd[6289]: pam_unix(sshd:session): session closed for user core Jul 10 01:19:18.421000 audit[6289]: USER_END pid=6289 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:18.432495 kernel: audit: type=1106 audit(1752110358.421:1879): pid=6289 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:18.432582 kernel: audit: type=1104 audit(1752110358.427:1880): pid=6289 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:18.427000 audit[6289]: CRED_DISP pid=6289 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:18.447798 systemd[1]: sshd@27-139.178.70.109:22-139.178.68.195:54062.service: Deactivated successfully. Jul 10 01:19:18.446000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-139.178.70.109:22-139.178.68.195:54062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:18.455794 kernel: audit: type=1131 audit(1752110358.446:1881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-139.178.70.109:22-139.178.68.195:54062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:18.448387 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 01:19:18.448516 systemd[1]: session-14.scope: Consumed 24.605s CPU time. Jul 10 01:19:18.452447 systemd-logind[1256]: Session 14 logged out. Waiting for processes to exit. Jul 10 01:19:18.465568 systemd-logind[1256]: Removed session 14. Jul 10 01:19:18.593195 kubelet[2155]: E0710 01:19:18.593129 2155 log.go:32] "RemovePodSandbox from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" podSandboxID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:19:18.634851 kubelet[2155]: E0710 01:19:18.634786 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="mounted volumes=[calico-apiserver-certs kube-api-access-stlkr]: context deadline exceeded" pod="calico-apiserver/calico-apiserver-bc9b765d7-d89jt" podUID="5ac12914-69e0-4aa4-80ef-d44295a97977" Jul 10 01:19:18.733179 kubelet[2155]: E0710 01:19:18.729753 2155 log.go:32] "ListImages with filter from image service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" filter="nil" Jul 10 01:19:18.733352 kubelet[2155]: E0710 01:19:18.733326 2155 kuberuntime_image.go:104] "Failed to list images" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 10 01:19:18.733429 kubelet[2155]: I0710 01:19:18.733419 2155 image_gc_manager.go:230] "Failed to update image list" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 10 01:19:18.773499 kubelet[2155]: W0710 01:19:18.773459 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-14.scope": 0x40000100 == IN_CREATE|IN_ISDIR): readdirent /sys/fs/cgroup/user.slice/user-500.slice/session-14.scope: no such file or directory Jul 10 01:19:18.773750 kubelet[2155]: W0710 01:19:18.773734 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@28-139.178.70.109:22-185.156.73.234:57392.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@28-139.178.70.109:22-185.156.73.234:57392.service: no such file or directory Jul 10 01:19:18.773824 kubelet[2155]: W0710 01:19:18.773811 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@29-139.178.70.109:22-45.119.81.249:41450.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@29-139.178.70.109:22-45.119.81.249:41450.service: no such file or directory Jul 10 01:19:18.773908 kubelet[2155]: W0710 01:19:18.773895 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@30-139.178.70.109:22-107.174.82.39:42728.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@30-139.178.70.109:22-107.174.82.39:42728.service: no such file or directory Jul 10 01:19:18.773997 kubelet[2155]: W0710 01:19:18.773983 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@31-139.178.70.109:22-218.78.46.81:60176.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@31-139.178.70.109:22-218.78.46.81:60176.service: no such file or directory Jul 10 01:19:18.774068 kubelet[2155]: W0710 01:19:18.774058 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@32-139.178.70.109:22-45.119.81.249:41294.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@32-139.178.70.109:22-45.119.81.249:41294.service: no such file or directory Jul 10 01:19:18.774126 kubelet[2155]: W0710 01:19:18.774116 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@33-139.178.70.109:22-107.174.82.39:42858.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@33-139.178.70.109:22-107.174.82.39:42858.service: no such file or directory Jul 10 01:19:18.781273 kubelet[2155]: E0710 01:19:18.781228 2155 log.go:32] "RemoveContainer from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413" Jul 10 01:19:18.781435 kubelet[2155]: I0710 01:19:18.781283 2155 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413"} err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" Jul 10 01:19:18.802431 kubelet[2155]: E0710 01:19:18.802305 2155 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1" cmd=["/health","-live"] Jul 10 01:19:18.820227 kubelet[2155]: E0710 01:19:18.820169 2155 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" containerID="b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Jul 10 01:19:18.848594 systemd[1]: var-lib-kubelet-pods-5ac12914\x2d69e0\x2d4aa4\x2d80ef\x2dd44295a97977-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dstlkr.mount: Deactivated successfully. Jul 10 01:19:18.853912 env[1271]: time="2025-07-10T01:19:18.853858736Z" level=error msg="get state for 670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1" error="context deadline exceeded: unknown" Jul 10 01:19:18.854143 env[1271]: time="2025-07-10T01:19:18.853905049Z" level=warning msg="unknown status" status=0 Jul 10 01:19:18.871565 env[1271]: time="2025-07-10T01:19:18.871527707Z" level=error msg="ExecSync for \"670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1\" failed" error="failed to exec in container: failed to create exec \"2a6d925c592ed33f2a47ed4fac425555ca867c1ca1f66023c42358df436271fb\": context deadline exceeded: unknown" Jul 10 01:19:18.908602 systemd[1]: run-containerd-runc-k8s.io-670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1-runc.aHKnVg.mount: Deactivated successfully. Jul 10 01:19:18.908709 systemd[1]: run-containerd-runc-k8s.io-b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511-runc.RxnDbG.mount: Deactivated successfully. Jul 10 01:19:18.908748 systemd[1]: run-containerd-runc-k8s.io-c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316-runc.1di4Kl.mount: Deactivated successfully. Jul 10 01:19:19.050037 kubelet[2155]: I0710 01:19:19.049467 2155 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5ac12914-69e0-4aa4-80ef-d44295a97977-calico-apiserver-certs\") pod \"5ac12914-69e0-4aa4-80ef-d44295a97977\" (UID: \"5ac12914-69e0-4aa4-80ef-d44295a97977\") " Jul 10 01:19:19.132978 kubelet[2155]: I0710 01:19:19.132713 2155 scope.go:117] "RemoveContainer" containerID="f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413" Jul 10 01:19:19.151044 kubelet[2155]: E0710 01:19:19.151009 2155 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = Unknown desc = failed to exec in container: failed to create exec \"2a6d925c592ed33f2a47ed4fac425555ca867c1ca1f66023c42358df436271fb\": context deadline exceeded: unknown" containerID="670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1" cmd=["/health","-ready"] Jul 10 01:19:19.151149 kubelet[2155]: E0710 01:19:19.151137 2155 kuberuntime_gc.go:184] "Failed to remove sandbox" err="rpc error: code = DeadlineExceeded desc = context deadline exceeded" sandboxID="e99f8eaa6e8bda20b3ad63f97a0483d64bf7d50850e2b56d7449719255bdf9b5" Jul 10 01:19:19.223234 kubelet[2155]: I0710 01:19:19.223199 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.223432 kubelet[2155]: I0710 01:19:19.223418 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.235742 kubelet[2155]: I0710 01:19:19.235710 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.235920 kubelet[2155]: I0710 01:19:19.235908 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"node-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.237548 kubelet[2155]: I0710 01:19:19.235999 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.237548 kubelet[2155]: I0710 01:19:19.236029 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.237548 kubelet[2155]: I0710 01:19:19.236062 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kubernetes-services-endpoint\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.237548 kubelet[2155]: I0710 01:19:19.236082 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"coredns\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.237548 kubelet[2155]: I0710 01:19:19.236104 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.237548 kubelet[2155]: I0710 01:19:19.236130 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-proxy\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.239611 kubelet[2155]: I0710 01:19:19.236152 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.239611 kubelet[2155]: I0710 01:19:19.236169 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.239611 kubelet[2155]: I0710 01:19:19.236188 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.239611 kubelet[2155]: I0710 01:19:19.236216 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.249041 kubelet[2155]: I0710 01:19:19.249010 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.249447 kubelet[2155]: I0710 01:19:19.249434 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.262694 kubelet[2155]: I0710 01:19:19.262665 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.279180 kubelet[2155]: I0710 01:19:19.279145 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.282567 kubelet[2155]: I0710 01:19:19.138596 2155 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5ac12914-69e0-4aa4-80ef-d44295a97977-kube-api-access-stlkr" (OuterVolumeSpecName: "kube-api-access-stlkr") pod "5ac12914-69e0-4aa4-80ef-d44295a97977" (UID: "5ac12914-69e0-4aa4-80ef-d44295a97977"). InnerVolumeSpecName "kube-api-access-stlkr". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 10 01:19:19.288419 env[1271]: time="2025-07-10T01:19:19.288064797Z" level=info msg="StopPodSandbox for \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\"" Jul 10 01:19:19.360966 kubelet[2155]: I0710 01:19:19.360918 2155 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-stlkr\" (UniqueName: \"kubernetes.io/projected/5ac12914-69e0-4aa4-80ef-d44295a97977-kube-api-access-stlkr\") on node \"localhost\" DevicePath \"\"" Jul 10 01:19:19.397779 kubelet[2155]: E0710 01:19:19.397749 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="3m38.614s" Jul 10 01:19:19.403764 kubelet[2155]: I0710 01:19:19.403742 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.405975 kubelet[2155]: I0710 01:19:19.403962 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:19.585057 kubelet[2155]: E0710 01:19:19.309561 2155 event.go:368] "Unable to write event (may retry after sleeping)" err="Patch \"https://139.178.70.109:6443/api/v1/namespaces/calico-system/events/calico-node-xxt5q.1850bec7440f025a\": http2: client connection lost" event="&Event{ObjectMeta:{calico-node-xxt5q.1850bec7440f025a calico-system 1715 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Pod,Namespace:calico-system,Name:calico-node-xxt5q,UID:fe41fd09-1dec-4c98-9b09-72bfd9813b68,APIVersion:v1,ResourceVersion:729,FieldPath:spec.containers{calico-node},},Reason:Unhealthy,Message:Liveness probe failed: Get \"http://localhost:9099/liveness\": context deadline exceeded (Client.Timeout exceeded while awaiting headers),Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 01:13:38 +0000 UTC,LastTimestamp:2025-07-10 01:19:18.688205461 +0000 UTC m=+706.711541257,Count:3,Type:Warning,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 01:19:19.603679 kubelet[2155]: E0710 01:19:19.601783 2155 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 3m38.80838414s ago; threshold is 3m0s" Jul 10 01:19:19.636704 kubelet[2155]: I0710 01:19:19.632949 2155 setters.go:618] "Node became not ready" node="localhost" condition={"type":"Ready","status":"False","lastHeartbeatTime":"2025-07-10T01:19:19Z","lastTransitionTime":"2025-07-10T01:19:19Z","reason":"KubeletNotReady","message":"PLEG is not healthy: pleg was last seen active 3m38.83499209s ago; threshold is 3m0s"} Jul 10 01:19:19.702151 kubelet[2155]: E0710 01:19:19.702122 2155 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 3m38.913502382s ago; threshold is 3m0s" Jul 10 01:19:19.874052 systemd[1]: var-lib-kubelet-pods-5ac12914\x2d69e0\x2d4aa4\x2d80ef\x2dd44295a97977-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 10 01:19:19.915076 systemd[1]: run-containerd-runc-k8s.io-c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316-runc.GE0EW4.mount: Deactivated successfully. Jul 10 01:19:19.924151 kubelet[2155]: E0710 01:19:19.916824 2155 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 3m39.128208257s ago; threshold is 3m0s" Jul 10 01:19:20.341029 kubelet[2155]: E0710 01:19:20.341004 2155 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 3m39.5523928s ago; threshold is 3m0s" Jul 10 01:19:20.772143 kubelet[2155]: I0710 01:19:20.473097 2155 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/5ac12914-69e0-4aa4-80ef-d44295a97977-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "5ac12914-69e0-4aa4-80ef-d44295a97977" (UID: "5ac12914-69e0-4aa4-80ef-d44295a97977"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 10 01:19:20.848135 systemd[1]: run-containerd-runc-k8s.io-670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1-runc.56dWuA.mount: Deactivated successfully. Jul 10 01:19:20.991207 kubelet[2155]: I0710 01:19:20.991167 2155 reflector.go:556] "Warning: watch ended with error" reflector="pkg/kubelet/config/apiserver.go:66" type="*v1.Pod" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:19:21.245004 kubelet[2155]: E0710 01:19:21.244950 2155 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 3m40.373841659s ago; threshold is 3m0s" Jul 10 01:19:21.265998 env[1271]: time="2025-07-10T01:19:21.265959553Z" level=info msg="RemoveContainer for \"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413\"" Jul 10 01:19:21.330738 kubelet[2155]: I0710 01:19:21.311618 2155 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5ac12914-69e0-4aa4-80ef-d44295a97977-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 10 01:19:21.355517 env[1271]: time="2025-07-10T01:19:21.355481540Z" level=info msg="RemoveContainer for \"f4cac23e792ec4a5434a09374d2767cdf575916cdad2d3543d07ff445ec6a413\" returns successfully" Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:20.433 [WARNING][6680] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0", GenerateName:"calico-kube-controllers-5bb8b6775d-", Namespace:"calico-system", SelfLink:"", UID:"17a5aa9d-ef26-4724-bbd7-3f4b190c3db1", ResourceVersion:"2024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5bb8b6775d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320", Pod:"calico-kube-controllers-5bb8b6775d-hjglt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali935173db813", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:20.454 [INFO][6680] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:20.454 [INFO][6680] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" iface="eth0" netns="" Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:20.454 [INFO][6680] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:20.454 [INFO][6680] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:21.173 [INFO][6708] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" HandleID="k8s-pod-network.cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:21.193 [INFO][6708] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:21.196 [INFO][6708] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:21.333 [WARNING][6708] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" HandleID="k8s-pod-network.cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:21.333 [INFO][6708] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" HandleID="k8s-pod-network.cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:21.338 [INFO][6708] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:21.393219 env[1271]: 2025-07-10 01:19:21.360 [INFO][6680] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:19:21.422302 env[1271]: time="2025-07-10T01:19:21.395718005Z" level=info msg="TearDown network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\" successfully" Jul 10 01:19:21.422302 env[1271]: time="2025-07-10T01:19:21.395747118Z" level=info msg="StopPodSandbox for \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\" returns successfully" Jul 10 01:19:21.853983 env[1271]: time="2025-07-10T01:19:21.853875915Z" level=info msg="RemovePodSandbox for \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\"" Jul 10 01:19:21.853983 env[1271]: time="2025-07-10T01:19:21.853927513Z" level=info msg="Forcibly stopping sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\"" Jul 10 01:19:22.292535 kubelet[2155]: I0710 01:19:22.279725 2155 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-65cf5b8cbd-2r9vq" podStartSLOduration=610.265275728 podStartE2EDuration="10m10.265275728s" podCreationTimestamp="2025-07-10 01:09:12 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 01:19:22.26506696 +0000 UTC m=+710.288402766" watchObservedRunningTime="2025-07-10 01:19:22.265275728 +0000 UTC m=+710.288611527" Jul 10 01:19:22.845591 kubelet[2155]: E0710 01:19:22.845556 2155 kubelet.go:2460] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 3m42.056942234s ago; threshold is 3m0s" Jul 10 01:19:23.029117 kubelet[2155]: I0710 01:19:23.029080 2155 scope.go:117] "RemoveContainer" containerID="5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183" Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:22.738 [WARNING][6743] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0", GenerateName:"calico-kube-controllers-5bb8b6775d-", Namespace:"calico-system", SelfLink:"", UID:"17a5aa9d-ef26-4724-bbd7-3f4b190c3db1", ResourceVersion:"2024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"5bb8b6775d", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"05f5e0cb2634323c55e2cafc2bfee306c891f021e0890631cdf2f21b41ab0320", Pod:"calico-kube-controllers-5bb8b6775d-hjglt", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali935173db813", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:22.741 [INFO][6743] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:22.741 [INFO][6743] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" iface="eth0" netns="" Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:22.741 [INFO][6743] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:22.741 [INFO][6743] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:23.080 [INFO][6751] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" HandleID="k8s-pod-network.cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:23.088 [INFO][6751] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:23.089 [INFO][6751] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:23.122 [WARNING][6751] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" HandleID="k8s-pod-network.cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:23.122 [INFO][6751] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" HandleID="k8s-pod-network.cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Workload="localhost-k8s-calico--kube--controllers--5bb8b6775d--hjglt-eth0" Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:23.129 [INFO][6751] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:23.133139 env[1271]: 2025-07-10 01:19:23.131 [INFO][6743] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244" Jul 10 01:19:23.143128 env[1271]: time="2025-07-10T01:19:23.133452082Z" level=info msg="TearDown network for sandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\" successfully" Jul 10 01:19:23.152066 env[1271]: time="2025-07-10T01:19:23.152038924Z" level=info msg="RemovePodSandbox \"cb00424c4f1a057f6a0ad9de6348ce3f4c9b6789abbea76200b932cfa2c88244\" returns successfully" Jul 10 01:19:23.173266 env[1271]: time="2025-07-10T01:19:23.173234438Z" level=info msg="StopPodSandbox for \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\"" Jul 10 01:19:23.197373 systemd[1]: Removed slice kubepods-besteffort-pod5ac12914_69e0_4aa4_80ef_d44295a97977.slice. Jul 10 01:19:23.197515 systemd[1]: kubepods-besteffort-pod5ac12914_69e0_4aa4_80ef_d44295a97977.slice: Consumed 1.509s CPU time. Jul 10 01:19:23.255788 env[1271]: time="2025-07-10T01:19:23.201227424Z" level=info msg="CreateContainer within sandbox \"2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:2,}" Jul 10 01:19:23.269376 env[1271]: time="2025-07-10T01:19:23.268229383Z" level=info msg="CreateContainer within sandbox \"2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:2,} returns container id \"c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5\"" Jul 10 01:19:23.271031 env[1271]: time="2025-07-10T01:19:23.271002781Z" level=info msg="StartContainer for \"c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5\"" Jul 10 01:19:23.272494 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2658821412.mount: Deactivated successfully. Jul 10 01:19:23.352200 systemd[1]: Started cri-containerd-c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5.scope. Jul 10 01:19:23.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.432153 kernel: audit: type=1400 audit(1752110363.369:1882): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.442651 kernel: audit: type=1400 audit(1752110363.369:1883): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.445760 kernel: audit: type=1400 audit(1752110363.369:1884): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.445792 kernel: audit: type=1400 audit(1752110363.369:1885): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.445816 kernel: audit: type=1400 audit(1752110363.369:1886): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.445835 kernel: audit: type=1400 audit(1752110363.369:1887): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.449954 kernel: audit: type=1400 audit(1752110363.369:1888): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.452517 kernel: audit: type=1400 audit(1752110363.369:1889): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.452546 kernel: audit: type=1400 audit(1752110363.369:1890): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.454441 kernel: audit: type=1400 audit(1752110363.371:1891): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.369000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.369000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.371000 audit: BPF prog-id=259 op=LOAD Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1855 pid=6774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:23.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338653730353136323630383936326230653631656331626636316236 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1855 pid=6774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:23.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338653730353136323630383936326230653631656331626636316236 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit: BPF prog-id=260 op=LOAD Jul 10 01:19:23.374000 audit[6774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000219d00 items=0 ppid=1855 pid=6774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:23.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338653730353136323630383936326230653631656331626636316236 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit: BPF prog-id=261 op=LOAD Jul 10 01:19:23.374000 audit[6774]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000219d48 items=0 ppid=1855 pid=6774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:23.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338653730353136323630383936326230653631656331626636316236 Jul 10 01:19:23.374000 audit: BPF prog-id=261 op=UNLOAD Jul 10 01:19:23.374000 audit: BPF prog-id=260 op=UNLOAD Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { perfmon } for pid=6774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit[6774]: AVC avc: denied { bpf } for pid=6774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:23.374000 audit: BPF prog-id=262 op=LOAD Jul 10 01:19:23.374000 audit[6774]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000412158 items=0 ppid=1855 pid=6774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:23.374000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338653730353136323630383936326230653631656331626636316236 Jul 10 01:19:23.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-139.178.70.109:22-139.178.68.195:56528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:23.400087 systemd[1]: Started sshd@34-139.178.70.109:22-139.178.68.195:56528.service. Jul 10 01:19:23.517286 env[1271]: time="2025-07-10T01:19:23.420897912Z" level=info msg="StartContainer for \"c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5\" returns successfully" Jul 10 01:19:23.672000 audit[6797]: USER_ACCT pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:23.676349 sshd[6797]: Accepted publickey for core from 139.178.68.195 port 56528 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:19:23.676000 audit[6797]: CRED_ACQ pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:23.676000 audit[6797]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe3f134240 a2=3 a3=0 items=0 ppid=1 pid=6797 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:23.676000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:19:23.684894 sshd[6797]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:19:23.741667 systemd-logind[1256]: New session 15 of user core. Jul 10 01:19:23.742384 systemd[1]: Started session-15.scope. Jul 10 01:19:23.748000 audit[6797]: USER_START pid=6797 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:23.749000 audit[6816]: CRED_ACQ pid=6816 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.494 [WARNING][6772] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" WorkloadEndpoint="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.498 [INFO][6772] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.498 [INFO][6772] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" iface="eth0" netns="" Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.498 [INFO][6772] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.498 [INFO][6772] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.855 [INFO][6806] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" HandleID="k8s-pod-network.e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Workload="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.874 [INFO][6806] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.875 [INFO][6806] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.894 [WARNING][6806] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" HandleID="k8s-pod-network.e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Workload="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.894 [INFO][6806] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" HandleID="k8s-pod-network.e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Workload="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.895 [INFO][6806] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:23.899531 env[1271]: 2025-07-10 01:19:23.897 [INFO][6772] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:19:23.903558 env[1271]: time="2025-07-10T01:19:23.901785136Z" level=info msg="TearDown network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\" successfully" Jul 10 01:19:23.903558 env[1271]: time="2025-07-10T01:19:23.901821699Z" level=info msg="StopPodSandbox for \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\" returns successfully" Jul 10 01:19:23.903776 env[1271]: time="2025-07-10T01:19:23.903752367Z" level=info msg="RemovePodSandbox for \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\"" Jul 10 01:19:23.903814 env[1271]: time="2025-07-10T01:19:23.903781131Z" level=info msg="Forcibly stopping sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\"" Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.021 [WARNING][6833] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" WorkloadEndpoint="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.023 [INFO][6833] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.023 [INFO][6833] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" iface="eth0" netns="" Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.023 [INFO][6833] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.023 [INFO][6833] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.073 [INFO][6840] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" HandleID="k8s-pod-network.e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Workload="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.076 [INFO][6840] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.076 [INFO][6840] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.086 [WARNING][6840] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" HandleID="k8s-pod-network.e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Workload="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.086 [INFO][6840] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" HandleID="k8s-pod-network.e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Workload="localhost-k8s-whisker--6bfb56c485--p4pwd-eth0" Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.092 [INFO][6840] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:24.097097 env[1271]: 2025-07-10 01:19:24.094 [INFO][6833] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b" Jul 10 01:19:24.103135 env[1271]: time="2025-07-10T01:19:24.097374890Z" level=info msg="TearDown network for sandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\" successfully" Jul 10 01:19:24.126113 env[1271]: time="2025-07-10T01:19:24.125983998Z" level=info msg="RemovePodSandbox \"e374dd005a505ee2385ab53d40668537ad39b3dd0460e0ae99d827a89e7eae9b\" returns successfully" Jul 10 01:19:24.166102 env[1271]: time="2025-07-10T01:19:24.166067576Z" level=info msg="StopPodSandbox for \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\"" Jul 10 01:19:24.267860 systemd[1]: run-containerd-runc-k8s.io-c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5-runc.xjBzS5.mount: Deactivated successfully. Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.313 [WARNING][6858] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--5zmkd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"45d2398f-e3d6-4a6c-98e9-53377db422f8", ResourceVersion:"1981", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430", Pod:"csi-node-driver-5zmkd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali456fefa2075", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.325 [INFO][6858] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.325 [INFO][6858] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" iface="eth0" netns="" Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.325 [INFO][6858] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.325 [INFO][6858] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.467 [INFO][6866] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" HandleID="k8s-pod-network.bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.467 [INFO][6866] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.467 [INFO][6866] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.473 [WARNING][6866] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" HandleID="k8s-pod-network.bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.473 [INFO][6866] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" HandleID="k8s-pod-network.bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.474 [INFO][6866] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:24.480301 env[1271]: 2025-07-10 01:19:24.478 [INFO][6858] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:19:24.502235 env[1271]: time="2025-07-10T01:19:24.481782245Z" level=info msg="TearDown network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\" successfully" Jul 10 01:19:24.502235 env[1271]: time="2025-07-10T01:19:24.481806405Z" level=info msg="StopPodSandbox for \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\" returns successfully" Jul 10 01:19:24.519562 env[1271]: time="2025-07-10T01:19:24.519523547Z" level=info msg="RemovePodSandbox for \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\"" Jul 10 01:19:24.521112 env[1271]: time="2025-07-10T01:19:24.519560505Z" level=info msg="Forcibly stopping sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\"" Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.567 [WARNING][6881] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--5zmkd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"45d2398f-e3d6-4a6c-98e9-53377db422f8", ResourceVersion:"1981", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 19, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"00cfa446c8379112b2bdf042bb4bdf241cc181401d23f69169b3307d0443e430", Pod:"csi-node-driver-5zmkd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali456fefa2075", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.567 [INFO][6881] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.567 [INFO][6881] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" iface="eth0" netns="" Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.567 [INFO][6881] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.567 [INFO][6881] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.601 [INFO][6889] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" HandleID="k8s-pod-network.bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.603 [INFO][6889] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.603 [INFO][6889] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.609 [WARNING][6889] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" HandleID="k8s-pod-network.bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.609 [INFO][6889] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" HandleID="k8s-pod-network.bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Workload="localhost-k8s-csi--node--driver--5zmkd-eth0" Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.610 [INFO][6889] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:24.614087 env[1271]: 2025-07-10 01:19:24.612 [INFO][6881] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8" Jul 10 01:19:24.622665 env[1271]: time="2025-07-10T01:19:24.614366617Z" level=info msg="TearDown network for sandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\" successfully" Jul 10 01:19:24.633265 env[1271]: time="2025-07-10T01:19:24.633227232Z" level=info msg="RemovePodSandbox \"bbd9114034e8e3c195beb62ff7c9cbe48ccc23d282c95dbac108a5cb74b8aaa8\" returns successfully" Jul 10 01:19:24.792280 env[1271]: time="2025-07-10T01:19:24.792186505Z" level=info msg="StopPodSandbox for \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\"" Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:24.964 [WARNING][6906] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0", GenerateName:"calico-apiserver-bc9b765d7-", Namespace:"calico-apiserver", SelfLink:"", UID:"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6", ResourceVersion:"2015", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bc9b765d7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d", Pod:"calico-apiserver-bc9b765d7-h2wtb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali10a52582a39", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:24.965 [INFO][6906] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:24.965 [INFO][6906] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" iface="eth0" netns="" Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:24.965 [INFO][6906] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:24.965 [INFO][6906] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:24.992 [INFO][6913] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" HandleID="k8s-pod-network.b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:24.993 [INFO][6913] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:24.993 [INFO][6913] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:25.013 [WARNING][6913] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" HandleID="k8s-pod-network.b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:25.013 [INFO][6913] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" HandleID="k8s-pod-network.b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:25.014 [INFO][6913] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:25.017757 env[1271]: 2025-07-10 01:19:25.016 [INFO][6906] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:19:25.049592 env[1271]: time="2025-07-10T01:19:25.017776416Z" level=info msg="TearDown network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\" successfully" Jul 10 01:19:25.049592 env[1271]: time="2025-07-10T01:19:25.017800192Z" level=info msg="StopPodSandbox for \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\" returns successfully" Jul 10 01:19:25.192363 env[1271]: time="2025-07-10T01:19:25.192303954Z" level=info msg="RemovePodSandbox for \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\"" Jul 10 01:19:25.192742 env[1271]: time="2025-07-10T01:19:25.192350704Z" level=info msg="Forcibly stopping sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\"" Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.268 [WARNING][6927] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0", GenerateName:"calico-apiserver-bc9b765d7-", Namespace:"calico-apiserver", SelfLink:"", UID:"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6", ResourceVersion:"2015", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 16, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"bc9b765d7", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d", Pod:"calico-apiserver-bc9b765d7-h2wtb", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali10a52582a39", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.269 [INFO][6927] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.269 [INFO][6927] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" iface="eth0" netns="" Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.269 [INFO][6927] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.269 [INFO][6927] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.307 [INFO][6934] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" HandleID="k8s-pod-network.b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.307 [INFO][6934] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.307 [INFO][6934] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.315 [WARNING][6934] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" HandleID="k8s-pod-network.b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.315 [INFO][6934] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" HandleID="k8s-pod-network.b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.317 [INFO][6934] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:25.322468 env[1271]: 2025-07-10 01:19:25.320 [INFO][6927] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268" Jul 10 01:19:25.331448 env[1271]: time="2025-07-10T01:19:25.322780016Z" level=info msg="TearDown network for sandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\" successfully" Jul 10 01:19:25.384937 env[1271]: time="2025-07-10T01:19:25.384902277Z" level=info msg="RemovePodSandbox \"b55eb3f2e5c53fb3457c09882eaac86b1b715de77e86c5d8bb561f1c64759268\" returns successfully" Jul 10 01:19:26.612352 env[1271]: time="2025-07-10T01:19:26.612152087Z" level=info msg="StopPodSandbox for \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\"" Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.127 [WARNING][6950] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"579e5385-aa98-44e2-be2c-7cc96ffa90c7", ResourceVersion:"1987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c", Pod:"goldmane-768f4c5c69-w6zc4", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6ae40113a51", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.132 [INFO][6950] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.132 [INFO][6950] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" iface="eth0" netns="" Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.132 [INFO][6950] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.132 [INFO][6950] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.794 [INFO][6957] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" HandleID="k8s-pod-network.1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.802 [INFO][6957] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.808 [INFO][6957] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.994 [WARNING][6957] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" HandleID="k8s-pod-network.1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.994 [INFO][6957] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" HandleID="k8s-pod-network.1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:27.998 [INFO][6957] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:28.025231 env[1271]: 2025-07-10 01:19:28.012 [INFO][6950] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:19:28.025231 env[1271]: time="2025-07-10T01:19:28.025216269Z" level=info msg="TearDown network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\" successfully" Jul 10 01:19:28.061417 env[1271]: time="2025-07-10T01:19:28.025245834Z" level=info msg="StopPodSandbox for \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\" returns successfully" Jul 10 01:19:30.024570 env[1271]: time="2025-07-10T01:19:30.024480804Z" level=info msg="RemovePodSandbox for \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\"" Jul 10 01:19:30.024570 env[1271]: time="2025-07-10T01:19:30.024510905Z" level=info msg="Forcibly stopping sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\"" Jul 10 01:19:30.266993 sshd[6797]: pam_unix(sshd:session): session closed for user core Jul 10 01:19:30.384347 kernel: kauditd_printk_skb: 55 callbacks suppressed Jul 10 01:19:30.455026 kernel: audit: type=1400 audit(1752110370.285:1906): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:30.474888 kernel: audit: type=1300 audit(1752110370.285:1906): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c013d97230 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:19:30.474952 kernel: audit: type=1327 audit(1752110370.285:1906): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:30.474974 kernel: audit: type=1400 audit(1752110370.285:1907): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:30.474993 kernel: audit: type=1300 audit(1752110370.285:1907): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00db5bd20 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:19:30.475022 kernel: audit: type=1327 audit(1752110370.285:1907): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:30.475050 kernel: audit: type=1130 audit(1752110370.311:1908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-139.178.70.109:22-45.119.81.249:41136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:30.482252 kernel: audit: type=1400 audit(1752110370.358:1909): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:30.484915 kernel: audit: type=1300 audit(1752110370.358:1909): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c012a251d0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:19:30.497687 kernel: audit: type=1327 audit(1752110370.358:1909): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:30.285000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:30.285000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c013d97230 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:19:30.285000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:30.285000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:30.285000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00db5bd20 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:19:30.285000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:30.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-139.178.70.109:22-45.119.81.249:41136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:30.358000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:30.358000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c012a251d0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:19:30.358000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:30.414000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:30.414000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c00622ca80 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:19:30.414000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:30.446000 audit[6797]: USER_END pid=6797 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:30.466000 audit[6797]: CRED_DISP pid=6797 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:30.479000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:30.479000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c013d97890 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:19:30.479000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:30.512000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@34-139.178.70.109:22-139.178.68.195:56528 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:30.518000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:30.518000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c012a25320 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:19:30.518000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:19:30.296228 systemd[1]: Started sshd@35-139.178.70.109:22-45.119.81.249:41136.service. Jul 10 01:19:30.513825 systemd[1]: sshd@34-139.178.70.109:22-139.178.68.195:56528.service: Deactivated successfully. Jul 10 01:19:30.514918 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 01:19:30.515064 systemd[1]: session-15.scope: Consumed 1.035s CPU time. Jul 10 01:19:30.517287 systemd-logind[1256]: Session 15 logged out. Waiting for processes to exit. Jul 10 01:19:30.521535 systemd-logind[1256]: Removed session 15. Jul 10 01:19:30.802324 kubelet[2155]: I0710 01:19:30.801946 2155 scope.go:117] "RemoveContainer" containerID="081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e" Jul 10 01:19:31.100195 env[1271]: time="2025-07-10T01:19:31.100116917Z" level=info msg="CreateContainer within sandbox \"e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:2,}" Jul 10 01:19:31.104123 kubelet[2155]: I0710 01:19:31.104064 2155 scope.go:117] "RemoveContainer" containerID="392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e" Jul 10 01:19:31.104920 kubelet[2155]: I0710 01:19:31.104893 2155 scope.go:117] "RemoveContainer" containerID="ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb" Jul 10 01:19:31.155340 env[1271]: time="2025-07-10T01:19:31.152988488Z" level=info msg="RemoveContainer for \"ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb\"" Jul 10 01:19:31.176153 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2617998072.mount: Deactivated successfully. Jul 10 01:19:31.187658 env[1271]: time="2025-07-10T01:19:31.187310600Z" level=info msg="CreateContainer within sandbox \"186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5\" for container &ContainerMetadata{Name:tigera-operator,Attempt:2,}" Jul 10 01:19:31.190377 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount133499627.mount: Deactivated successfully. Jul 10 01:19:31.198078 env[1271]: time="2025-07-10T01:19:31.198047373Z" level=info msg="RemoveContainer for \"ab9eed4e397d026c787c0f2c8f85c866dde056011ba06d1d344a6474093d6dfb\" returns successfully" Jul 10 01:19:31.202544 kubelet[2155]: I0710 01:19:31.202521 2155 scope.go:117] "RemoveContainer" containerID="fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325" Jul 10 01:19:31.218901 env[1271]: time="2025-07-10T01:19:31.218871106Z" level=info msg="RemoveContainer for \"fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325\"" Jul 10 01:19:31.223167 env[1271]: time="2025-07-10T01:19:31.223134315Z" level=info msg="CreateContainer within sandbox \"e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:2,} returns container id \"853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad\"" Jul 10 01:19:31.237515 env[1271]: time="2025-07-10T01:19:31.237490340Z" level=info msg="StartContainer for \"853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad\"" Jul 10 01:19:31.271057 env[1271]: time="2025-07-10T01:19:31.271003038Z" level=info msg="RemoveContainer for \"fa777de30bb1d5a822963d349b9bc806b906d54991f7e530191d87d00ebad325\" returns successfully" Jul 10 01:19:31.280894 kubelet[2155]: I0710 01:19:31.276186 2155 scope.go:117] "RemoveContainer" containerID="fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0" Jul 10 01:19:31.283236 systemd[1]: Started cri-containerd-853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad.scope. Jul 10 01:19:31.287506 env[1271]: time="2025-07-10T01:19:31.287486606Z" level=info msg="RemoveContainer for \"fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0\"" Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.306000 audit: BPF prog-id=263 op=LOAD Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1839 pid=7023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835336661306261313537343335663565636438333136303637666531 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1839 pid=7023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835336661306261313537343335663565636438333136303637666531 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit: BPF prog-id=264 op=LOAD Jul 10 01:19:31.307000 audit[7023]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000219a00 items=0 ppid=1839 pid=7023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835336661306261313537343335663565636438333136303637666531 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit: BPF prog-id=265 op=LOAD Jul 10 01:19:31.307000 audit[7023]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000219a48 items=0 ppid=1839 pid=7023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835336661306261313537343335663565636438333136303637666531 Jul 10 01:19:31.307000 audit: BPF prog-id=265 op=UNLOAD Jul 10 01:19:31.307000 audit: BPF prog-id=264 op=UNLOAD Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { perfmon } for pid=7023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit[7023]: AVC avc: denied { bpf } for pid=7023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.307000 audit: BPF prog-id=266 op=LOAD Jul 10 01:19:31.307000 audit[7023]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000219e58 items=0 ppid=1839 pid=7023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.307000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835336661306261313537343335663565636438333136303637666531 Jul 10 01:19:31.370722 env[1271]: time="2025-07-10T01:19:31.308095171Z" level=info msg="CreateContainer within sandbox \"186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5\" for &ContainerMetadata{Name:tigera-operator,Attempt:2,} returns container id \"71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d\"" Jul 10 01:19:31.370722 env[1271]: time="2025-07-10T01:19:31.309482393Z" level=info msg="StartContainer for \"71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d\"" Jul 10 01:19:31.370722 env[1271]: time="2025-07-10T01:19:31.324464652Z" level=info msg="RemoveContainer for \"fb4339b4a168ac77695de7d0e3adc7561800bd465022a8da250b8f07c60273a0\" returns successfully" Jul 10 01:19:31.370722 env[1271]: time="2025-07-10T01:19:31.363313493Z" level=info msg="StartContainer for \"853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad\" returns successfully" Jul 10 01:19:31.343616 systemd[1]: Started cri-containerd-71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d.scope. Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.377000 audit: BPF prog-id=267 op=LOAD Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2253 pid=7046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731623139336239626637313331373737333839353031633832363235 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2253 pid=7046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731623139336239626637313331373737333839353031633832363235 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit: BPF prog-id=268 op=LOAD Jul 10 01:19:31.378000 audit[7046]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002d7e50 items=0 ppid=2253 pid=7046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731623139336239626637313331373737333839353031633832363235 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit: BPF prog-id=269 op=LOAD Jul 10 01:19:31.378000 audit[7046]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002d7e98 items=0 ppid=2253 pid=7046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731623139336239626637313331373737333839353031633832363235 Jul 10 01:19:31.378000 audit: BPF prog-id=269 op=UNLOAD Jul 10 01:19:31.378000 audit: BPF prog-id=268 op=UNLOAD Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { perfmon } for pid=7046 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit[7046]: AVC avc: denied { bpf } for pid=7046 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:19:31.378000 audit: BPF prog-id=270 op=LOAD Jul 10 01:19:31.378000 audit[7046]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003262a8 items=0 ppid=2253 pid=7046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:31.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731623139336239626637313331373737333839353031633832363235 Jul 10 01:19:31.400538 env[1271]: time="2025-07-10T01:19:31.400474290Z" level=info msg="StartContainer for \"71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d\" returns successfully" Jul 10 01:19:31.737733 sshd[7004]: Invalid user deploy from 45.119.81.249 port 41136 Jul 10 01:19:31.830756 sshd[7004]: pam_faillock(sshd:auth): User unknown Jul 10 01:19:31.838000 audit[7004]: USER_AUTH pid=7004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="deploy" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:19:31.839506 sshd[7004]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:19:31.839556 sshd[7004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:19:31.839936 sshd[7004]: pam_faillock(sshd:auth): User unknown Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:31.469 [WARNING][7003] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"579e5385-aa98-44e2-be2c-7cc96ffa90c7", ResourceVersion:"1987", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c1f629885ce840fb13bfd577921ef07b3fe9cd9213ae6d3cd1c78151b610892c", Pod:"goldmane-768f4c5c69-w6zc4", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali6ae40113a51", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:31.503 [INFO][7003] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:31.503 [INFO][7003] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" iface="eth0" netns="" Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:31.503 [INFO][7003] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:31.503 [INFO][7003] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:33.588 [INFO][7075] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" HandleID="k8s-pod-network.1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:33.620 [INFO][7075] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:33.630 [INFO][7075] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:33.823 [WARNING][7075] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" HandleID="k8s-pod-network.1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:33.828 [INFO][7075] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" HandleID="k8s-pod-network.1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Workload="localhost-k8s-goldmane--768f4c5c69--w6zc4-eth0" Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:33.835 [INFO][7075] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:33.882918 env[1271]: 2025-07-10 01:19:33.859 [INFO][7003] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec" Jul 10 01:19:33.882918 env[1271]: time="2025-07-10T01:19:33.882294261Z" level=info msg="TearDown network for sandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\" successfully" Jul 10 01:19:33.917497 env[1271]: time="2025-07-10T01:19:33.895728262Z" level=info msg="RemovePodSandbox \"1be236d66a66045b09f740d427425746c4a5cd12f4cd99d2c52c36a78e8c64ec\" returns successfully" Jul 10 01:19:34.082477 env[1271]: time="2025-07-10T01:19:34.082095975Z" level=info msg="StopPodSandbox for \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\"" Jul 10 01:19:34.219645 sshd[7004]: Failed password for invalid user deploy from 45.119.81.249 port 41136 ssh2 Jul 10 01:19:34.825795 kubelet[2155]: I0710 01:19:34.814455 2155 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="5ac12914-69e0-4aa4-80ef-d44295a97977" path="/var/lib/kubelet/pods/5ac12914-69e0-4aa4-80ef-d44295a97977/volumes" Jul 10 01:19:34.983326 kubelet[2155]: E0710 01:19:34.983289 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.405s" Jul 10 01:19:35.454748 systemd[1]: Started sshd@36-139.178.70.109:22-139.178.68.195:33872.service. Jul 10 01:19:35.606811 kernel: kauditd_printk_skb: 127 callbacks suppressed Jul 10 01:19:35.628086 kernel: audit: type=1130 audit(1752110375.465:1953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-139.178.70.109:22-139.178.68.195:33872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:35.465000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-139.178.70.109:22-139.178.68.195:33872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:35.769084 sshd[7004]: Received disconnect from 45.119.81.249 port 41136:11: Bye Bye [preauth] Jul 10 01:19:35.769084 sshd[7004]: Disconnected from invalid user deploy 45.119.81.249 port 41136 [preauth] Jul 10 01:19:35.824216 systemd[1]: sshd@35-139.178.70.109:22-45.119.81.249:41136.service: Deactivated successfully. Jul 10 01:19:35.833486 kernel: audit: type=1131 audit(1752110375.823:1954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-139.178.70.109:22-45.119.81.249:41136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:35.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@35-139.178.70.109:22-45.119.81.249:41136 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:35.892599 sshd[7117]: Accepted publickey for core from 139.178.68.195 port 33872 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:19:35.891000 audit[7117]: USER_ACCT pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:35.907162 kernel: audit: type=1101 audit(1752110375.891:1955): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:35.907228 kernel: audit: type=1103 audit(1752110375.895:1956): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:35.907252 kernel: audit: type=1006 audit(1752110375.895:1957): pid=7117 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 10 01:19:35.907270 kernel: audit: type=1300 audit(1752110375.895:1957): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffba793390 a2=3 a3=0 items=0 ppid=1 pid=7117 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:35.895000 audit[7117]: CRED_ACQ pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:35.915103 kernel: audit: type=1327 audit(1752110375.895:1957): proctitle=737368643A20636F7265205B707269765D Jul 10 01:19:35.895000 audit[7117]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffba793390 a2=3 a3=0 items=0 ppid=1 pid=7117 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:35.895000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:19:35.908211 sshd[7117]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:19:36.116575 systemd-logind[1256]: New session 16 of user core. Jul 10 01:19:36.119425 systemd[1]: Started session-16.scope. Jul 10 01:19:36.141000 audit[7117]: USER_START pid=7117 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:36.155960 kernel: audit: type=1105 audit(1752110376.141:1958): pid=7117 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:36.268000 audit[7121]: CRED_ACQ pid=7121 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:36.274349 kernel: audit: type=1103 audit(1752110376.268:1959): pid=7121 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:36.856000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:36.886776 kernel: audit: type=1400 audit(1752110376.856:1960): avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:36.856000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0007ca080 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:19:36.856000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:36.856000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:36.856000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000a3e510 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:19:36.856000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:35.154 [WARNING][7103] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0", GenerateName:"calico-apiserver-65cf5b8cbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b216b96-a8e0-466c-b036-61e1eca75bd4", ResourceVersion:"2005", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65cf5b8cbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48", Pod:"calico-apiserver-65cf5b8cbd-zbf79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5c94aadfcdc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:35.161 [INFO][7103] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:35.161 [INFO][7103] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" iface="eth0" netns="" Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:35.161 [INFO][7103] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:35.161 [INFO][7103] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:36.701 [INFO][7110] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" HandleID="k8s-pod-network.77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:36.712 [INFO][7110] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:36.713 [INFO][7110] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:36.908 [WARNING][7110] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" HandleID="k8s-pod-network.77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:36.908 [INFO][7110] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" HandleID="k8s-pod-network.77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:36.910 [INFO][7110] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:36.995832 env[1271]: 2025-07-10 01:19:36.931 [INFO][7103] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:19:37.059879 env[1271]: time="2025-07-10T01:19:36.998982980Z" level=info msg="TearDown network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\" successfully" Jul 10 01:19:37.059879 env[1271]: time="2025-07-10T01:19:36.999007640Z" level=info msg="StopPodSandbox for \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\" returns successfully" Jul 10 01:19:37.479505 env[1271]: time="2025-07-10T01:19:37.479092715Z" level=info msg="RemovePodSandbox for \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\"" Jul 10 01:19:37.479505 env[1271]: time="2025-07-10T01:19:37.479117298Z" level=info msg="Forcibly stopping sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\"" Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:40.028 [WARNING][7171] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0", GenerateName:"calico-apiserver-65cf5b8cbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b216b96-a8e0-466c-b036-61e1eca75bd4", ResourceVersion:"2203", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 1, 8, 17, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65cf5b8cbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1cc2e907008c3e6e66778059bc86fdfea2494ac7fd123ad3474d94607985cf48", Pod:"calico-apiserver-65cf5b8cbd-zbf79", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali5c94aadfcdc", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:40.076 [INFO][7171] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:40.076 [INFO][7171] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" iface="eth0" netns="" Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:40.077 [INFO][7171] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:40.080 [INFO][7171] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:40.958 [INFO][7186] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" HandleID="k8s-pod-network.77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:40.966 [INFO][7186] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:40.966 [INFO][7186] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:41.042 [WARNING][7186] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" HandleID="k8s-pod-network.77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:41.042 [INFO][7186] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" HandleID="k8s-pod-network.77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Workload="localhost-k8s-calico--apiserver--65cf5b8cbd--zbf79-eth0" Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:41.043 [INFO][7186] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:19:41.126464 env[1271]: 2025-07-10 01:19:41.104 [INFO][7171] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9" Jul 10 01:19:41.126464 env[1271]: time="2025-07-10T01:19:41.119225173Z" level=info msg="TearDown network for sandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\" successfully" Jul 10 01:19:41.288516 env[1271]: time="2025-07-10T01:19:41.147810126Z" level=info msg="RemovePodSandbox \"77ccb4bcd7b2f3a15f8272eaef41ea7311396acb51f65f0ac9deef9988f5d6c9\" returns successfully" Jul 10 01:19:43.202727 systemd[1]: Started sshd@37-139.178.70.109:22-218.78.46.81:43482.service. Jul 10 01:19:43.224606 kernel: kauditd_printk_skb: 5 callbacks suppressed Jul 10 01:19:43.228764 kernel: audit: type=1130 audit(1752110383.206:1962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-139.178.70.109:22-218.78.46.81:43482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:43.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-139.178.70.109:22-218.78.46.81:43482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:46.121055 kubelet[2155]: E0710 01:19:46.069991 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="9.249s" Jul 10 01:19:46.828595 sshd[7117]: pam_unix(sshd:session): session closed for user core Jul 10 01:19:46.860062 kernel: audit: type=1130 audit(1752110386.848:1963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-139.178.70.109:22-139.178.68.195:44962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:46.905142 kernel: audit: type=1106 audit(1752110386.883:1964): pid=7117 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:46.905190 kernel: audit: type=1104 audit(1752110386.888:1965): pid=7117 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:46.920031 kernel: audit: type=1131 audit(1752110386.892:1966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-139.178.70.109:22-139.178.68.195:33872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:46.848000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-139.178.70.109:22-139.178.68.195:44962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:46.883000 audit[7117]: USER_END pid=7117 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:46.888000 audit[7117]: CRED_DISP pid=7117 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:46.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@36-139.178.70.109:22-139.178.68.195:33872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:46.849625 systemd[1]: Started sshd@38-139.178.70.109:22-139.178.68.195:44962.service. Jul 10 01:19:46.893785 systemd[1]: sshd@36-139.178.70.109:22-139.178.68.195:33872.service: Deactivated successfully. Jul 10 01:19:46.902244 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 01:19:46.902376 systemd[1]: session-16.scope: Consumed 1.082s CPU time. Jul 10 01:19:46.902786 systemd-logind[1256]: Session 16 logged out. Waiting for processes to exit. Jul 10 01:19:46.903361 systemd-logind[1256]: Removed session 16. Jul 10 01:19:47.100000 audit[7222]: USER_ACCT pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:47.109983 kernel: audit: type=1101 audit(1752110387.100:1967): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:47.110024 kernel: audit: type=1103 audit(1752110387.105:1968): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:47.105000 audit[7222]: CRED_ACQ pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:47.110111 sshd[7222]: Accepted publickey for core from 139.178.68.195 port 44962 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:19:47.112407 kernel: audit: type=1006 audit(1752110387.105:1969): pid=7222 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 10 01:19:47.115784 kernel: audit: type=1300 audit(1752110387.105:1969): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd110d2360 a2=3 a3=0 items=0 ppid=1 pid=7222 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:47.105000 audit[7222]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd110d2360 a2=3 a3=0 items=0 ppid=1 pid=7222 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:47.133661 kernel: audit: type=1327 audit(1752110387.105:1969): proctitle=737368643A20636F7265205B707269765D Jul 10 01:19:47.105000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:19:47.116963 sshd[7222]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:19:47.166973 systemd-logind[1256]: New session 17 of user core. Jul 10 01:19:47.168251 systemd[1]: Started session-17.scope. Jul 10 01:19:47.172000 audit[7222]: USER_START pid=7222 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:47.173000 audit[7225]: CRED_ACQ pid=7225 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.055913 sshd[7222]: pam_unix(sshd:session): session closed for user core Jul 10 01:19:48.055000 audit[7222]: USER_END pid=7222 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.055000 audit[7222]: CRED_DISP pid=7222 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.060343 systemd[1]: sshd@38-139.178.70.109:22-139.178.68.195:44962.service: Deactivated successfully. Jul 10 01:19:48.059000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@38-139.178.70.109:22-139.178.68.195:44962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:48.061186 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 01:19:48.061871 systemd-logind[1256]: Session 17 logged out. Waiting for processes to exit. Jul 10 01:19:48.062000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-139.178.70.109:22-139.178.68.195:54714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:48.063969 systemd[1]: Started sshd@39-139.178.70.109:22-139.178.68.195:54714.service. Jul 10 01:19:48.065232 systemd-logind[1256]: Removed session 17. Jul 10 01:19:48.110000 audit[7234]: USER_ACCT pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.112600 sshd[7234]: Accepted publickey for core from 139.178.68.195 port 54714 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:19:48.111000 audit[7234]: CRED_ACQ pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.112000 audit[7234]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe464f83e0 a2=3 a3=0 items=0 ppid=1 pid=7234 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:48.112000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:19:48.113814 sshd[7234]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:19:48.117899 systemd[1]: Started session-18.scope. Jul 10 01:19:48.118207 systemd-logind[1256]: New session 18 of user core. Jul 10 01:19:48.120000 audit[7234]: USER_START pid=7234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.121000 audit[7236]: CRED_ACQ pid=7236 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.315800 sshd[7234]: pam_unix(sshd:session): session closed for user core Jul 10 01:19:48.321193 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 10 01:19:48.328160 kernel: audit: type=1106 audit(1752110388.315:1981): pid=7234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.328232 kernel: audit: type=1104 audit(1752110388.317:1982): pid=7234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.328262 kernel: audit: type=1131 audit(1752110388.320:1983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-139.178.70.109:22-139.178.68.195:54714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:48.315000 audit[7234]: USER_END pid=7234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.317000 audit[7234]: CRED_DISP pid=7234 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:48.320000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@39-139.178.70.109:22-139.178.68.195:54714 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:48.321577 systemd[1]: sshd@39-139.178.70.109:22-139.178.68.195:54714.service: Deactivated successfully. Jul 10 01:19:48.322112 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 01:19:48.325002 systemd-logind[1256]: Session 18 logged out. Waiting for processes to exit. Jul 10 01:19:48.329056 systemd-logind[1256]: Removed session 18. Jul 10 01:19:53.320074 systemd[1]: Started sshd@40-139.178.70.109:22-139.178.68.195:54724.service. Jul 10 01:19:53.327465 kernel: audit: type=1130 audit(1752110393.318:1984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-139.178.70.109:22-139.178.68.195:54724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:53.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-139.178.70.109:22-139.178.68.195:54724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:53.497000 audit[7245]: USER_ACCT pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:53.501148 sshd[7245]: Accepted publickey for core from 139.178.68.195 port 54724 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:19:53.504519 kernel: audit: type=1101 audit(1752110393.497:1985): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:53.504575 kernel: audit: type=1103 audit(1752110393.501:1986): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:53.501000 audit[7245]: CRED_ACQ pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:53.508841 kernel: audit: type=1006 audit(1752110393.501:1987): pid=7245 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Jul 10 01:19:53.508901 kernel: audit: type=1300 audit(1752110393.501:1987): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe70c10440 a2=3 a3=0 items=0 ppid=1 pid=7245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:53.501000 audit[7245]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe70c10440 a2=3 a3=0 items=0 ppid=1 pid=7245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:53.501000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:19:53.513911 kernel: audit: type=1327 audit(1752110393.501:1987): proctitle=737368643A20636F7265205B707269765D Jul 10 01:19:53.514349 sshd[7245]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:19:53.518841 systemd-logind[1256]: New session 19 of user core. Jul 10 01:19:53.520036 systemd[1]: Started session-19.scope. Jul 10 01:19:53.522000 audit[7245]: USER_START pid=7245 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:53.527375 kernel: audit: type=1105 audit(1752110393.522:1988): pid=7245 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:53.526000 audit[7247]: CRED_ACQ pid=7247 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:53.531396 kernel: audit: type=1103 audit(1752110393.526:1989): pid=7247 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:54.237270 sshd[7245]: pam_unix(sshd:session): session closed for user core Jul 10 01:19:54.237000 audit[7245]: USER_END pid=7245 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:54.242266 systemd[1]: sshd@40-139.178.70.109:22-139.178.68.195:54724.service: Deactivated successfully. Jul 10 01:19:54.242359 kernel: audit: type=1106 audit(1752110394.237:1990): pid=7245 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:54.242789 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 01:19:54.243218 systemd-logind[1256]: Session 19 logged out. Waiting for processes to exit. Jul 10 01:19:54.237000 audit[7245]: CRED_DISP pid=7245 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:54.247468 kernel: audit: type=1104 audit(1752110394.237:1991): pid=7245 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:19:54.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@40-139.178.70.109:22-139.178.68.195:54724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:19:54.246755 systemd-logind[1256]: Removed session 19. Jul 10 01:19:55.392000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:19:55.392000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000d65280 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:19:55.392000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:55.407000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:19:55.407000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0002ebf90 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:19:55.407000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:55.422000 audit[7257]: AVC avc: denied { execute } for pid=7257 comm="kube-controller" name="uds" dev="sda9" ino=7466 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 10 01:19:55.422000 audit[7257]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c000b241e0 a1=c000a1de90 a2=c00049fa00 a3=0 items=0 ppid=7033 pid=7257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:19:55.422000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:55.508000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:55.508000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e22e80 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:19:55.508000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:55.508000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:55.508000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e22ec0 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:19:55.508000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:55.509000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:55.509000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e22f00 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:19:55.509000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:55.509000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:19:55.509000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e22f40 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:19:55.509000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:19:57.921000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:19:57.921000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:19:57.921000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001332120 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:19:57.921000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:19:57.921000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002be2380 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:19:57.921000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:19:58.358504 kernel: kauditd_printk_skb: 28 callbacks suppressed Jul 10 01:19:58.379275 kernel: audit: type=1325 audit(1752110398.354:2002): table=filter:148 family=2 entries=15 op=nft_register_rule pid=7279 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:19:58.388004 kernel: audit: type=1300 audit(1752110398.354:2002): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe52aec590 a2=0 a3=7ffe52aec57c items=0 ppid=2305 pid=7279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:58.388054 kernel: audit: type=1327 audit(1752110398.354:2002): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:19:58.354000 audit[7279]: NETFILTER_CFG table=filter:148 family=2 entries=15 op=nft_register_rule pid=7279 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:19:58.414286 kernel: audit: type=1325 audit(1752110398.390:2003): table=nat:149 family=2 entries=81 op=nft_register_chain pid=7279 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:19:58.414375 kernel: audit: type=1300 audit(1752110398.390:2003): arch=c000003e syscall=46 success=yes exit=37172 a0=3 a1=7ffe52aec590 a2=0 a3=7ffe52aec57c items=0 ppid=2305 pid=7279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:58.417249 kernel: audit: type=1327 audit(1752110398.390:2003): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:19:58.354000 audit[7279]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe52aec590 a2=0 a3=7ffe52aec57c items=0 ppid=2305 pid=7279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:58.354000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:19:58.390000 audit[7279]: NETFILTER_CFG table=nat:149 family=2 entries=81 op=nft_register_chain pid=7279 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:19:58.390000 audit[7279]: SYSCALL arch=c000003e syscall=46 success=yes exit=37172 a0=3 a1=7ffe52aec590 a2=0 a3=7ffe52aec57c items=0 ppid=2305 pid=7279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:58.390000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:19:58.631000 audit[7281]: NETFILTER_CFG table=filter:150 family=2 entries=8 op=nft_register_rule pid=7281 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:19:58.643174 kernel: audit: type=1325 audit(1752110398.631:2004): table=filter:150 family=2 entries=8 op=nft_register_rule pid=7281 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:19:58.643370 kernel: audit: type=1300 audit(1752110398.631:2004): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc1a4912b0 a2=0 a3=7ffc1a49129c items=0 ppid=2305 pid=7281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:58.643403 kernel: audit: type=1327 audit(1752110398.631:2004): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:19:58.631000 audit[7281]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc1a4912b0 a2=0 a3=7ffc1a49129c items=0 ppid=2305 pid=7281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:58.631000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:19:58.652000 audit[7281]: NETFILTER_CFG table=nat:151 family=2 entries=44 op=nft_unregister_chain pid=7281 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:19:58.662203 kernel: audit: type=1325 audit(1752110398.652:2005): table=nat:151 family=2 entries=44 op=nft_unregister_chain pid=7281 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:19:58.652000 audit[7281]: SYSCALL arch=c000003e syscall=46 success=yes exit=12900 a0=3 a1=7ffc1a4912b0 a2=0 a3=7ffc1a49129c items=0 ppid=2305 pid=7281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:19:58.652000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:19:59.718267 systemd[1]: Started sshd@41-139.178.70.109:22-139.178.68.195:49514.service. Jul 10 01:19:59.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-139.178.70.109:22-139.178.68.195:49514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:20:00.270572 sshd[7284]: Accepted publickey for core from 139.178.68.195 port 49514 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:20:00.269000 audit[7284]: USER_ACCT pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:20:00.271000 audit[7284]: CRED_ACQ pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:20:00.271000 audit[7284]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc7c7c2a0 a2=3 a3=0 items=0 ppid=1 pid=7284 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:20:00.271000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:20:00.283040 sshd[7284]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:20:00.431430 systemd-logind[1256]: New session 20 of user core. Jul 10 01:20:00.460425 systemd[1]: Started session-20.scope. Jul 10 01:20:00.473000 audit[7284]: USER_START pid=7284 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:20:00.474000 audit[7286]: CRED_ACQ pid=7286 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:20:11.848935 systemd[1]: Started sshd@42-139.178.70.109:22-101.37.89.146:53662.service. Jul 10 01:20:12.113689 kernel: kauditd_printk_skb: 10 callbacks suppressed Jul 10 01:20:12.146622 kernel: audit: type=1130 audit(1752110411.852:2012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-139.178.70.109:22-101.37.89.146:53662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:20:11.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-139.178.70.109:22-101.37.89.146:53662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:20:12.352814 sshd[7298]: kex_exchange_identification: Connection closed by remote host Jul 10 01:20:12.462212 kernel: audit: type=1131 audit(1752110412.380:2013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-139.178.70.109:22-101.37.89.146:53662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:20:12.380000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@42-139.178.70.109:22-101.37.89.146:53662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:20:12.497564 sshd[7298]: Connection closed by 101.37.89.146 port 53662 Jul 10 01:20:12.372031 systemd[1]: sshd@42-139.178.70.109:22-101.37.89.146:53662.service: Deactivated successfully. Jul 10 01:20:15.528000 audit[6252]: AVC avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:20:15.722941 kernel: audit: type=1400 audit(1752110415.528:2014): avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:20:15.741056 kernel: audit: type=1300 audit(1752110415.528:2014): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0029bb4c0 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:20:15.742438 kernel: audit: type=1327 audit(1752110415.528:2014): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:20:15.528000 audit[6252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0029bb4c0 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:20:15.528000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:20:30.361000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.620046 kernel: audit: type=1400 audit(1752110430.361:2015): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.660042 kernel: audit: type=1300 audit(1752110430.361:2015): arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c009919380 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:20:30.665737 kernel: audit: type=1327 audit(1752110430.361:2015): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:20:30.668872 kernel: audit: type=1400 audit(1752110430.417:2016): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.668899 kernel: audit: type=1300 audit(1752110430.417:2016): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c0101e88a0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:20:30.668918 kernel: audit: type=1327 audit(1752110430.417:2016): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:20:30.671153 kernel: audit: type=1400 audit(1752110430.461:2017): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.675509 kernel: audit: type=1300 audit(1752110430.461:2017): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c006e098e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:20:30.675536 kernel: audit: type=1327 audit(1752110430.461:2017): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:20:30.679142 kernel: audit: type=1400 audit(1752110430.508:2018): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.361000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c009919380 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:20:30.361000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:20:30.417000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.417000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c0101e88a0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:20:30.417000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:20:30.461000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.461000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c006e098e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:20:30.461000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:20:30.508000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.508000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00c009c80 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:20:30.508000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:20:30.616000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.616000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c009919a10 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:20:30.616000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:20:30.666000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:30.666000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c009919ad0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:20:30.666000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:20:36.939581 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 10 01:20:37.141447 kernel: audit: type=1400 audit(1752110436.914:2021): avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:37.159442 kernel: audit: type=1300 audit(1752110436.914:2021): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002ca6e80 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:37.164295 kernel: audit: type=1327 audit(1752110436.914:2021): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:37.170861 kernel: audit: type=1400 audit(1752110436.914:2022): avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:37.170899 kernel: audit: type=1300 audit(1752110436.914:2022): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002d3ca20 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:37.175379 kernel: audit: type=1327 audit(1752110436.914:2022): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:36.914000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:36.914000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002ca6e80 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:36.914000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:36.914000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:36.914000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002d3ca20 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:36.914000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:55.628000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:56.117531 kernel: audit: type=1400 audit(1752110455.628:2023): avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:56.149413 kernel: audit: type=1300 audit(1752110455.628:2023): arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c002d3b520 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:56.153593 kernel: audit: type=1327 audit(1752110455.628:2023): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:56.157512 kernel: audit: type=1400 audit(1752110455.628:2024): avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:56.162863 kernel: audit: type=1300 audit(1752110455.628:2024): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002ca7780 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:56.162912 kernel: audit: type=1327 audit(1752110455.628:2024): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:56.164814 kernel: audit: type=1400 audit(1752110455.690:2025): avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:56.164854 kernel: audit: type=1300 audit(1752110455.690:2025): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002ca77c0 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:56.167392 kernel: audit: type=1327 audit(1752110455.690:2025): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:56.170141 kernel: audit: type=1400 audit(1752110455.787:2026): avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:55.628000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=f a1=c002d3b520 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:55.628000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:55.628000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:55.628000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002ca7780 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:55.628000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:55.690000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:55.690000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002ca77c0 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:55.690000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:55.787000 audit[7033]: AVC avc: denied { watch } for pid=7033 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:20:55.787000 audit[7033]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002ca7880 a2=fc6 a3=0 items=0 ppid=1839 pid=7033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:20:55.787000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:20:56.501908 systemd[1]: Started sshd@43-139.178.70.109:22-45.119.81.249:40980.service. Jul 10 01:20:56.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-139.178.70.109:22-45.119.81.249:40980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:20:58.099000 audit[4407]: AVC avc: denied { watch } for pid=4407 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.1272105661/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c169,c748 tclass=file permissive=0 Jul 10 01:20:58.099000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:20:58.099000 audit[4407]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b6af40 a2=fc6 a3=0 items=0 ppid=4184 pid=4407 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c169,c748 key=(null) Jul 10 01:20:58.099000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:20:58.099000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0010150c0 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:20:58.099000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:20:58.850987 sshd[7308]: Invalid user dmdba from 45.119.81.249 port 40980 Jul 10 01:20:59.004000 audit[7308]: USER_AUTH pid=7308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="dmdba" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:20:58.979581 sshd[7308]: pam_faillock(sshd:auth): User unknown Jul 10 01:20:58.986993 sshd[7308]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:20:58.994692 sshd[7308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:20:58.995022 sshd[7308]: pam_faillock(sshd:auth): User unknown Jul 10 01:21:00.740833 sshd[7308]: Failed password for invalid user dmdba from 45.119.81.249 port 40980 ssh2 Jul 10 01:21:02.044729 sshd[7308]: Received disconnect from 45.119.81.249 port 40980:11: Bye Bye [preauth] Jul 10 01:21:02.044729 sshd[7308]: Disconnected from invalid user dmdba 45.119.81.249 port 40980 [preauth] Jul 10 01:21:02.832054 kernel: kauditd_printk_skb: 10 callbacks suppressed Jul 10 01:21:02.870862 kernel: audit: type=1131 audit(1752110462.577:2031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-139.178.70.109:22-45.119.81.249:40980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:02.577000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@43-139.178.70.109:22-45.119.81.249:40980 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:02.500597 systemd[1]: sshd@43-139.178.70.109:22-45.119.81.249:40980.service: Deactivated successfully. Jul 10 01:21:06.638998 systemd[1]: cri-containerd-71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d.scope: Deactivated successfully. Jul 10 01:21:06.835749 kernel: audit: type=1334 audit(1752110466.651:2032): prog-id=267 op=UNLOAD Jul 10 01:21:06.845564 kernel: audit: type=1334 audit(1752110466.656:2033): prog-id=270 op=UNLOAD Jul 10 01:21:06.845622 kernel: audit: type=1334 audit(1752110466.732:2034): prog-id=263 op=UNLOAD Jul 10 01:21:06.846894 kernel: audit: type=1334 audit(1752110466.769:2035): prog-id=266 op=UNLOAD Jul 10 01:21:06.651000 audit: BPF prog-id=267 op=UNLOAD Jul 10 01:21:06.656000 audit: BPF prog-id=270 op=UNLOAD Jul 10 01:21:06.732000 audit: BPF prog-id=263 op=UNLOAD Jul 10 01:21:06.769000 audit: BPF prog-id=266 op=UNLOAD Jul 10 01:21:06.890226 env[1271]: time="2025-07-10T01:21:06.703180316Z" level=info msg="shim disconnected" id=71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d Jul 10 01:21:06.890226 env[1271]: time="2025-07-10T01:21:06.703216180Z" level=warning msg="cleaning up after shim disconnected" id=71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d namespace=k8s.io Jul 10 01:21:06.890226 env[1271]: time="2025-07-10T01:21:06.703223891Z" level=info msg="cleaning up dead shim" Jul 10 01:21:06.890226 env[1271]: time="2025-07-10T01:21:06.710026395Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:21:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7326 runtime=io.containerd.runc.v2\n" Jul 10 01:21:06.890226 env[1271]: time="2025-07-10T01:21:06.777754696Z" level=info msg="shim disconnected" id=853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad Jul 10 01:21:06.890226 env[1271]: time="2025-07-10T01:21:06.777781771Z" level=warning msg="cleaning up after shim disconnected" id=853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad namespace=k8s.io Jul 10 01:21:06.890226 env[1271]: time="2025-07-10T01:21:06.777789879Z" level=info msg="cleaning up dead shim" Jul 10 01:21:06.890226 env[1271]: time="2025-07-10T01:21:06.784514126Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:21:06Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7351 runtime=io.containerd.runc.v2\n" Jul 10 01:21:06.651907 systemd[1]: cri-containerd-71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d.scope: Consumed 1.501s CPU time. Jul 10 01:21:06.732471 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d-rootfs.mount: Deactivated successfully. Jul 10 01:21:06.733013 systemd[1]: cri-containerd-853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad.scope: Deactivated successfully. Jul 10 01:21:06.733139 systemd[1]: cri-containerd-853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad.scope: Consumed 1.889s CPU time. Jul 10 01:21:06.767927 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad-rootfs.mount: Deactivated successfully. Jul 10 01:21:07.501000 audit: BPF prog-id=259 op=UNLOAD Jul 10 01:21:07.504597 kernel: audit: type=1334 audit(1752110467.501:2036): prog-id=259 op=UNLOAD Jul 10 01:21:07.507050 kernel: audit: type=1334 audit(1752110467.505:2037): prog-id=262 op=UNLOAD Jul 10 01:21:07.505000 audit: BPF prog-id=262 op=UNLOAD Jul 10 01:21:07.501689 systemd[1]: cri-containerd-c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5.scope: Deactivated successfully. Jul 10 01:21:07.501836 systemd[1]: cri-containerd-c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5.scope: Consumed 1.237s CPU time. Jul 10 01:21:07.533598 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5-rootfs.mount: Deactivated successfully. Jul 10 01:21:07.539974 env[1271]: time="2025-07-10T01:21:07.539933777Z" level=info msg="shim disconnected" id=c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5 Jul 10 01:21:07.539974 env[1271]: time="2025-07-10T01:21:07.539969254Z" level=warning msg="cleaning up after shim disconnected" id=c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5 namespace=k8s.io Jul 10 01:21:07.539974 env[1271]: time="2025-07-10T01:21:07.539976325Z" level=info msg="cleaning up dead shim" Jul 10 01:21:07.547067 env[1271]: time="2025-07-10T01:21:07.547037390Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:21:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7377 runtime=io.containerd.runc.v2\n" Jul 10 01:21:09.865784 systemd[1]: Started sshd@44-139.178.70.109:22-18.116.239.38:55458.service. Jul 10 01:21:09.886430 kernel: audit: type=1130 audit(1752110469.869:2038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-139.178.70.109:22-18.116.239.38:55458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:09.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-139.178.70.109:22-18.116.239.38:55458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:10.360003 sshd[7407]: kex_exchange_identification: Connection closed by remote host Jul 10 01:21:10.360003 sshd[7407]: Connection closed by 18.116.239.38 port 55458 Jul 10 01:21:10.373857 kernel: audit: type=1131 audit(1752110470.360:2039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-139.178.70.109:22-18.116.239.38:55458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:10.360000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@44-139.178.70.109:22-18.116.239.38:55458 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:10.360527 systemd[1]: sshd@44-139.178.70.109:22-18.116.239.38:55458.service: Deactivated successfully. Jul 10 01:21:11.069054 kubelet[2155]: W0710 01:21:09.771283 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@42-139.178.70.109:22-101.37.89.146:53662.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@42-139.178.70.109:22-101.37.89.146:53662.service: no such file or directory Jul 10 01:21:11.411190 systemd[1]: run-containerd-runc-k8s.io-670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1-runc.ZqYOvT.mount: Deactivated successfully. Jul 10 01:21:11.746911 kubelet[2155]: I0710 01:21:11.746843 2155 ???:1] "http: TLS handshake error from 18.116.239.38:47386: EOF" Jul 10 01:21:11.755601 kubelet[2155]: W0710 01:21:11.747638 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@43-139.178.70.109:22-45.119.81.249:40980.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@43-139.178.70.109:22-45.119.81.249:40980.service: no such file or directory Jul 10 01:21:11.755601 kubelet[2155]: W0710 01:21:11.747726 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@44-139.178.70.109:22-18.116.239.38:55458.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@44-139.178.70.109:22-18.116.239.38:55458.service: no such file or directory Jul 10 01:21:12.031697 kernel: audit: type=1130 audit(1752110472.027:2040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-139.178.70.109:22-103.139.193.187:47640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:12.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-139.178.70.109:22-103.139.193.187:47640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:12.027447 systemd[1]: Started sshd@45-139.178.70.109:22-103.139.193.187:47640.service. Jul 10 01:21:12.395907 kubelet[2155]: I0710 01:21:12.395884 2155 scope.go:117] "RemoveContainer" containerID="081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e" Jul 10 01:21:13.403272 env[1271]: time="2025-07-10T01:21:13.403059980Z" level=info msg="RemoveContainer for \"081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e\"" Jul 10 01:21:13.501375 systemd[1]: run-containerd-runc-k8s.io-670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1-runc.hmT8Yl.mount: Deactivated successfully. Jul 10 01:21:13.535758 env[1271]: time="2025-07-10T01:21:13.503621386Z" level=info msg="RemoveContainer for \"081f97d69ae117edb028078ed7a5b6d7e163e99592035431a3a2c6a56f03872e\" returns successfully" Jul 10 01:21:14.153865 kubelet[2155]: I0710 01:21:14.153833 2155 scope.go:117] "RemoveContainer" containerID="392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e" Jul 10 01:21:14.182774 kernel: audit: type=1130 audit(1752110474.162:2041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-139.178.70.109:22-139.178.68.195:38222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:14.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-139.178.70.109:22-139.178.68.195:38222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:14.166212 sshd[7284]: pam_unix(sshd:session): session closed for user core Jul 10 01:21:14.256324 kernel: audit: type=1106 audit(1752110474.212:2042): pid=7284 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.256407 kernel: audit: type=1104 audit(1752110474.216:2043): pid=7284 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.256434 kernel: audit: type=1131 audit(1752110474.223:2044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-139.178.70.109:22-139.178.68.195:49514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:14.212000 audit[7284]: USER_END pid=7284 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.216000 audit[7284]: CRED_DISP pid=7284 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.223000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@41-139.178.70.109:22-139.178.68.195:49514 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:14.159496 systemd[1]: Started sshd@46-139.178.70.109:22-139.178.68.195:38222.service. Jul 10 01:21:14.221119 systemd[1]: sshd@41-139.178.70.109:22-139.178.68.195:49514.service: Deactivated successfully. Jul 10 01:21:14.224610 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 01:21:14.224716 systemd[1]: session-20.scope: Consumed 4.894s CPU time. Jul 10 01:21:14.227496 systemd-logind[1256]: Session 20 logged out. Waiting for processes to exit. Jul 10 01:21:14.228267 systemd-logind[1256]: Removed session 20. Jul 10 01:21:14.480000 audit[7595]: USER_ACCT pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.495632 kernel: audit: type=1101 audit(1752110474.480:2045): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.495695 kernel: audit: type=1103 audit(1752110474.483:2046): pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.495720 kernel: audit: type=1006 audit(1752110474.483:2047): pid=7595 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 10 01:21:14.483000 audit[7595]: CRED_ACQ pid=7595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.483000 audit[7595]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcacad67f0 a2=3 a3=0 items=0 ppid=1 pid=7595 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:14.483000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:14.588195 sshd[7595]: Accepted publickey for core from 139.178.68.195 port 38222 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:21:14.507869 sshd[7595]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:21:14.599902 kubelet[2155]: E0710 01:21:14.385588 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="3.778s" Jul 10 01:21:14.668441 systemd[1]: Started session-21.scope. Jul 10 01:21:14.669015 systemd-logind[1256]: New session 21 of user core. Jul 10 01:21:14.672000 audit[7595]: USER_START pid=7595 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.673000 audit[7598]: CRED_ACQ pid=7598 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:14.698559 systemd[1]: run-containerd-runc-k8s.io-b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511-runc.SdIYNw.mount: Deactivated successfully. Jul 10 01:21:15.454470 env[1271]: time="2025-07-10T01:21:15.454439757Z" level=info msg="RemoveContainer for \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\"" Jul 10 01:21:15.491962 env[1271]: time="2025-07-10T01:21:15.491927192Z" level=info msg="RemoveContainer for \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\" returns successfully" Jul 10 01:21:15.646000 audit[6252]: AVC avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:21:15.697522 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 10 01:21:15.719130 kernel: audit: type=1400 audit(1752110475.646:2050): avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:21:15.719205 kernel: audit: type=1300 audit(1752110475.646:2050): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0029ba980 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:21:15.729589 kernel: audit: type=1327 audit(1752110475.646:2050): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:21:15.646000 audit[6252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0029ba980 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:21:15.646000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:21:15.755755 kubelet[2155]: I0710 01:21:15.681128 2155 scope.go:117] "RemoveContainer" containerID="5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183" Jul 10 01:21:15.766970 sshd[7546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.193.187 user=root Jul 10 01:21:15.779772 kernel: audit: type=1100 audit(1752110475.766:2051): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=103.139.193.187 addr=103.139.193.187 terminal=ssh res=failed' Jul 10 01:21:15.766000 audit[7546]: USER_AUTH pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=103.139.193.187 addr=103.139.193.187 terminal=ssh res=failed' Jul 10 01:21:16.125053 env[1271]: time="2025-07-10T01:21:16.124579522Z" level=info msg="StopContainer for \"5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b\" with timeout 30 (s)" Jul 10 01:21:16.125053 env[1271]: time="2025-07-10T01:21:16.124997601Z" level=info msg="Stop container \"5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b\" with signal terminated" Jul 10 01:21:16.136955 systemd[1]: cri-containerd-5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b.scope: Deactivated successfully. Jul 10 01:21:16.142996 kernel: audit: type=1334 audit(1752110476.136:2052): prog-id=201 op=UNLOAD Jul 10 01:21:16.153368 kernel: audit: type=1334 audit(1752110476.140:2053): prog-id=204 op=UNLOAD Jul 10 01:21:16.136000 audit: BPF prog-id=201 op=UNLOAD Jul 10 01:21:16.140000 audit: BPF prog-id=204 op=UNLOAD Jul 10 01:21:16.137156 systemd[1]: cri-containerd-5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b.scope: Consumed 1.514s CPU time. Jul 10 01:21:16.185784 env[1271]: time="2025-07-10T01:21:16.171933768Z" level=info msg="shim disconnected" id=5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b Jul 10 01:21:16.185784 env[1271]: time="2025-07-10T01:21:16.171960016Z" level=warning msg="cleaning up after shim disconnected" id=5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b namespace=k8s.io Jul 10 01:21:16.185784 env[1271]: time="2025-07-10T01:21:16.171965806Z" level=info msg="cleaning up dead shim" Jul 10 01:21:16.185784 env[1271]: time="2025-07-10T01:21:16.177004831Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:21:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7647 runtime=io.containerd.runc.v2\n" Jul 10 01:21:16.170616 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b-rootfs.mount: Deactivated successfully. Jul 10 01:21:16.265582 kubelet[2155]: E0710 01:21:16.265554 2155 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.548s" Jul 10 01:21:16.273948 kubelet[2155]: I0710 01:21:16.273926 2155 scope.go:117] "RemoveContainer" containerID="392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e" Jul 10 01:21:16.284376 env[1271]: time="2025-07-10T01:21:16.284339409Z" level=info msg="StopContainer for \"5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b\" returns successfully" Jul 10 01:21:16.326157 env[1271]: time="2025-07-10T01:21:16.326129806Z" level=info msg="RemoveContainer for \"5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183\"" Jul 10 01:21:16.326876 env[1271]: time="2025-07-10T01:21:16.326808259Z" level=error msg="ContainerStatus for \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\": not found" Jul 10 01:21:16.337992 env[1271]: time="2025-07-10T01:21:16.337963321Z" level=info msg="RemoveContainer for \"5c53353457945fe96150f29fc30da3a5ed0edc90d570d8a6285db491102da183\" returns successfully" Jul 10 01:21:16.346247 env[1271]: time="2025-07-10T01:21:16.346212786Z" level=info msg="StopPodSandbox for \"7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d\"" Jul 10 01:21:16.346507 env[1271]: time="2025-07-10T01:21:16.346491670Z" level=info msg="Container to stop \"5051c97dbe62fd3e7dcff4e85571df61cd859d89c8344ed4720e2a8c634cb51b\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 10 01:21:16.348647 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d-shm.mount: Deactivated successfully. Jul 10 01:21:16.355426 systemd[1]: cri-containerd-7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d.scope: Deactivated successfully. Jul 10 01:21:16.360835 kernel: audit: type=1334 audit(1752110476.355:2054): prog-id=181 op=UNLOAD Jul 10 01:21:16.360884 kernel: audit: type=1334 audit(1752110476.359:2055): prog-id=184 op=UNLOAD Jul 10 01:21:16.355000 audit: BPF prog-id=181 op=UNLOAD Jul 10 01:21:16.359000 audit: BPF prog-id=184 op=UNLOAD Jul 10 01:21:16.379030 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d-rootfs.mount: Deactivated successfully. Jul 10 01:21:16.381343 env[1271]: time="2025-07-10T01:21:16.381307667Z" level=info msg="shim disconnected" id=7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d Jul 10 01:21:16.381454 env[1271]: time="2025-07-10T01:21:16.381441319Z" level=warning msg="cleaning up after shim disconnected" id=7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d namespace=k8s.io Jul 10 01:21:16.381512 env[1271]: time="2025-07-10T01:21:16.381495283Z" level=info msg="cleaning up dead shim" Jul 10 01:21:16.387872 env[1271]: time="2025-07-10T01:21:16.387841437Z" level=warning msg="cleanup warnings time=\"2025-07-10T01:21:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7678 runtime=io.containerd.runc.v2\n" Jul 10 01:21:16.465142 kubelet[2155]: E0710 01:21:16.465106 2155 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\": not found" containerID="392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e" Jul 10 01:21:16.465402 kubelet[2155]: I0710 01:21:16.465151 2155 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e"} err="failed to get container status \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\": rpc error: code = NotFound desc = an error occurred when try to find container \"392874858c7a7fe18ae128811ae85fcddf863edcf37ba346992cd64d46b4091e\": not found" Jul 10 01:21:16.506873 env[1271]: time="2025-07-10T01:21:16.506555296Z" level=info msg="StopPodSandbox for \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\"" Jul 10 01:21:16.512050 kubelet[2155]: I0710 01:21:16.511865 2155 scope.go:117] "RemoveContainer" containerID="c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5" Jul 10 01:21:16.512050 kubelet[2155]: E0710 01:21:16.511972 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-scheduler\" with CrashLoopBackOff: \"back-off 20s restarting failed container=kube-scheduler pod=kube-scheduler-localhost_kube-system(834ee54f1daa06092e339273649eb5ea)\"" pod="kube-system/kube-scheduler-localhost" podUID="834ee54f1daa06092e339273649eb5ea" Jul 10 01:21:16.569276 kubelet[2155]: I0710 01:21:16.567980 2155 scope.go:117] "RemoveContainer" containerID="853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad" Jul 10 01:21:16.569276 kubelet[2155]: E0710 01:21:16.568093 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-controller-manager\" with CrashLoopBackOff: \"back-off 20s restarting failed container=kube-controller-manager pod=kube-controller-manager-localhost_kube-system(84b858ec27c8b2738b1d9ff9927e0dcb)\"" pod="kube-system/kube-controller-manager-localhost" podUID="84b858ec27c8b2738b1d9ff9927e0dcb" Jul 10 01:21:17.494857 sshd[7595]: pam_unix(sshd:session): session closed for user core Jul 10 01:21:17.548230 kernel: audit: type=1106 audit(1752110477.495:2056): pid=7595 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:17.555860 kernel: audit: type=1104 audit(1752110477.495:2057): pid=7595 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:17.495000 audit[7595]: USER_END pid=7595 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:17.495000 audit[7595]: CRED_DISP pid=7595 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:17.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-139.178.70.109:22-139.178.68.195:38238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:17.519000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@46-139.178.70.109:22-139.178.68.195:38222 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:17.518580 systemd[1]: Started sshd@47-139.178.70.109:22-139.178.68.195:38238.service. Jul 10 01:21:17.519749 systemd[1]: sshd@46-139.178.70.109:22-139.178.68.195:38222.service: Deactivated successfully. Jul 10 01:21:17.520593 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 01:21:17.521127 systemd-logind[1256]: Session 21 logged out. Waiting for processes to exit. Jul 10 01:21:17.522318 systemd-logind[1256]: Removed session 21. Jul 10 01:21:17.549350 systemd-networkd[1083]: cali10a52582a39: Link DOWN Jul 10 01:21:17.549355 systemd-networkd[1083]: cali10a52582a39: Lost carrier Jul 10 01:21:17.718104 sshd[7546]: Failed password for root from 103.139.193.187 port 47640 ssh2 Jul 10 01:21:17.724999 kubelet[2155]: I0710 01:21:17.724975 2155 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Jul 10 01:21:17.739324 kubelet[2155]: I0710 01:21:17.739145 2155 scope.go:117] "RemoveContainer" containerID="71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d" Jul 10 01:21:17.739547 kubelet[2155]: E0710 01:21:17.739530 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 20s restarting failed container=tigera-operator pod=tigera-operator-747864d56d-lpdxt_tigera-operator(6b20fca4-ab6c-49d9-aabe-27d2ac940dcf)\"" pod="tigera-operator/tigera-operator-747864d56d-lpdxt" podUID="6b20fca4-ab6c-49d9-aabe-27d2ac940dcf" Jul 10 01:21:17.911660 kubelet[2155]: I0710 01:21:17.911642 2155 scope.go:117] "RemoveContainer" containerID="853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad" Jul 10 01:21:17.911919 kubelet[2155]: E0710 01:21:17.911903 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-controller-manager\" with CrashLoopBackOff: \"back-off 20s restarting failed container=kube-controller-manager pod=kube-controller-manager-localhost_kube-system(84b858ec27c8b2738b1d9ff9927e0dcb)\"" pod="kube-system/kube-controller-manager-localhost" podUID="84b858ec27c8b2738b1d9ff9927e0dcb" Jul 10 01:21:17.926660 kubelet[2155]: I0710 01:21:17.926643 2155 scope.go:117] "RemoveContainer" containerID="c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5" Jul 10 01:21:17.926948 kubelet[2155]: E0710 01:21:17.926933 2155 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-scheduler\" with CrashLoopBackOff: \"back-off 20s restarting failed container=kube-scheduler pod=kube-scheduler-localhost_kube-system(834ee54f1daa06092e339273649eb5ea)\"" pod="kube-system/kube-scheduler-localhost" podUID="834ee54f1daa06092e339273649eb5ea" Jul 10 01:21:17.936000 audit[7730]: USER_ACCT pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:17.937000 audit[7730]: CRED_ACQ pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:17.937000 audit[7730]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc4a955e0 a2=3 a3=0 items=0 ppid=1 pid=7730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:17.937000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:17.979000 audit[7730]: USER_START pid=7730 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:17.980000 audit[7744]: CRED_ACQ pid=7744 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:17.983379 sshd[7730]: Accepted publickey for core from 139.178.68.195 port 38238 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:21:17.953654 sshd[7730]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:21:17.975619 systemd[1]: Started session-22.scope. Jul 10 01:21:17.975929 systemd-logind[1256]: New session 22 of user core. Jul 10 01:21:18.165000 audit[7747]: NETFILTER_CFG table=filter:152 family=2 entries=55 op=nft_register_rule pid=7747 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:21:18.165000 audit[7747]: SYSCALL arch=c000003e syscall=46 success=yes exit=8928 a0=3 a1=7ffd359a27a0 a2=0 a3=7ffd359a278c items=0 ppid=3510 pid=7747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:18.165000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:21:18.166000 audit[7747]: NETFILTER_CFG table=filter:153 family=2 entries=2 op=nft_unregister_chain pid=7747 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 01:21:18.166000 audit[7747]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd359a27a0 a2=0 a3=562093cd9000 items=0 ppid=3510 pid=7747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:18.166000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 01:21:18.627463 sshd[7546]: Received disconnect from 103.139.193.187 port 47640:11: Bye Bye [preauth] Jul 10 01:21:18.627463 sshd[7546]: Disconnected from authenticating user root 103.139.193.187 port 47640 [preauth] Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:17.451 [WARNING][7712] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:17.465 [INFO][7712] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:17.465 [INFO][7712] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" iface="eth0" netns="" Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:17.465 [INFO][7712] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:17.465 [INFO][7712] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:18.382 [INFO][7725] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:18.384 [INFO][7725] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:18.613 [INFO][7725] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:18.619 [WARNING][7725] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:18.619 [INFO][7725] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:18.620 [INFO][7725] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:21:18.656110 env[1271]: 2025-07-10 01:21:18.637 [INFO][7712] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:21:18.673356 env[1271]: time="2025-07-10T01:21:18.656128619Z" level=info msg="TearDown network for sandbox \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\" successfully" Jul 10 01:21:18.673356 env[1271]: time="2025-07-10T01:21:18.656149732Z" level=info msg="StopPodSandbox for \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\" returns successfully" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:17.481 [INFO][7711] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:17.481 [INFO][7711] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" iface="eth0" netns="/var/run/netns/cni-97155d66-3edd-6132-682e-d1e086731972" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:17.484 [INFO][7711] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" iface="eth0" netns="/var/run/netns/cni-97155d66-3edd-6132-682e-d1e086731972" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:17.513 [INFO][7711] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" after=31.209975ms iface="eth0" netns="/var/run/netns/cni-97155d66-3edd-6132-682e-d1e086731972" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:17.513 [INFO][7711] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:17.513 [INFO][7711] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:18.382 [INFO][7729] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" HandleID="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:18.384 [INFO][7729] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:18.384 [INFO][7729] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:18.612 [INFO][7729] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" HandleID="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:18.612 [INFO][7729] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" HandleID="k8s-pod-network.7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Workload="localhost-k8s-calico--apiserver--bc9b765d7--h2wtb-eth0" Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:18.613 [INFO][7729] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:21:18.673356 env[1271]: 2025-07-10 01:21:18.637 [INFO][7711] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d" Jul 10 01:21:18.673356 env[1271]: time="2025-07-10T01:21:18.662260010Z" level=info msg="TearDown network for sandbox \"7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d\" successfully" Jul 10 01:21:18.673356 env[1271]: time="2025-07-10T01:21:18.662289565Z" level=info msg="StopPodSandbox for \"7141bb8d16ce4c7320020ec8147e100832a7f687effce74ba6a69a7cbe67974d\" returns successfully" Jul 10 01:21:18.678055 systemd[1]: run-netns-cni\x2d97155d66\x2d3edd\x2d6132\x2d682e\x2dd1e086731972.mount: Deactivated successfully. Jul 10 01:21:18.683569 env[1271]: time="2025-07-10T01:21:18.678841578Z" level=info msg="RemovePodSandbox for \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\"" Jul 10 01:21:18.683569 env[1271]: time="2025-07-10T01:21:18.678881774Z" level=info msg="Forcibly stopping sandbox \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\"" Jul 10 01:21:18.683479 systemd[1]: Starting systemd-tmpfiles-clean.service... Jul 10 01:21:18.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@45-139.178.70.109:22-103.139.193.187:47640 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:18.694698 systemd[1]: sshd@45-139.178.70.109:22-103.139.193.187:47640.service: Deactivated successfully. Jul 10 01:21:19.174796 kubelet[2155]: I0710 01:21:19.174748 2155 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6-calico-apiserver-certs\") pod \"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6\" (UID: \"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6\") " Jul 10 01:21:19.175290 kubelet[2155]: I0710 01:21:19.174828 2155 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xpldh\" (UniqueName: \"kubernetes.io/projected/24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6-kube-api-access-xpldh\") pod \"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6\" (UID: \"24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6\") " Jul 10 01:21:19.367117 systemd-tmpfiles[7756]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 01:21:19.527657 systemd[1]: var-lib-kubelet-pods-24a2b1bf\x2dd1f6\x2d4493\x2d9b94\x2db2e4b47ef0d6-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxpldh.mount: Deactivated successfully. Jul 10 01:21:19.527740 systemd[1]: var-lib-kubelet-pods-24a2b1bf\x2dd1f6\x2d4493\x2d9b94\x2db2e4b47ef0d6-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 10 01:21:19.547264 systemd-tmpfiles[7756]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 01:21:19.610227 kubelet[2155]: I0710 01:21:19.599676 2155 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6-kube-api-access-xpldh" (OuterVolumeSpecName: "kube-api-access-xpldh") pod "24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6" (UID: "24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6"). InnerVolumeSpecName "kube-api-access-xpldh". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 10 01:21:19.613322 kubelet[2155]: I0710 01:21:19.592122 2155 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6" (UID: "24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 10 01:21:19.631745 systemd-tmpfiles[7756]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 01:21:19.659701 kubelet[2155]: I0710 01:21:19.659668 2155 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 10 01:21:19.659701 kubelet[2155]: I0710 01:21:19.659693 2155 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-xpldh\" (UniqueName: \"kubernetes.io/projected/24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6-kube-api-access-xpldh\") on node \"localhost\" DevicePath \"\"" Jul 10 01:21:19.902389 systemd[1]: run-containerd-runc-k8s.io-c8c31efb612b338841825134efa11f85002d3e4f23411ddf084828f24a230316-runc.aEhrpH.mount: Deactivated successfully. Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:19.888 [WARNING][7767] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" WorkloadEndpoint="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:19.904 [INFO][7767] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:19.904 [INFO][7767] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" iface="eth0" netns="" Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:19.914 [INFO][7767] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:19.914 [INFO][7767] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:20.074 [INFO][7800] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:20.075 [INFO][7800] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:20.075 [INFO][7800] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:20.079 [WARNING][7800] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:20.079 [INFO][7800] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" HandleID="k8s-pod-network.abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Workload="localhost-k8s-calico--apiserver--bc9b765d7--d89jt-eth0" Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:20.081 [INFO][7800] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 01:21:20.085434 env[1271]: 2025-07-10 01:21:20.083 [INFO][7767] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88" Jul 10 01:21:20.110856 env[1271]: time="2025-07-10T01:21:20.086118266Z" level=info msg="TearDown network for sandbox \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\" successfully" Jul 10 01:21:20.155783 env[1271]: time="2025-07-10T01:21:20.155723886Z" level=info msg="RemovePodSandbox \"abb141401f757a5926f8a9819945ce6680072a0faf1e094a2a4553c253fb5d88\" returns successfully" Jul 10 01:21:20.181643 systemd[1]: Removed slice kubepods-besteffort-pod24a2b1bf_d1f6_4493_9b94_b2e4b47ef0d6.slice. Jul 10 01:21:20.181706 systemd[1]: kubepods-besteffort-pod24a2b1bf_d1f6_4493_9b94_b2e4b47ef0d6.slice: Consumed 1.537s CPU time. Jul 10 01:21:20.242479 systemd[1]: systemd-tmpfiles-clean.service: Deactivated successfully. Jul 10 01:21:20.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:20.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:20.242590 systemd[1]: Finished systemd-tmpfiles-clean.service. Jul 10 01:21:20.244798 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dclean.service.mount: Deactivated successfully. Jul 10 01:21:20.548999 kubelet[2155]: I0710 01:21:20.542131 2155 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6" path="/var/lib/kubelet/pods/24a2b1bf-d1f6-4493-9b94-b2e4b47ef0d6/volumes" Jul 10 01:21:20.741627 systemd[1]: Started sshd@48-139.178.70.109:22-139.178.68.195:53832.service. Jul 10 01:21:20.745513 kernel: kauditd_printk_skb: 18 callbacks suppressed Jul 10 01:21:20.752296 kernel: audit: type=1130 audit(1752110480.740:2070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-139.178.70.109:22-139.178.68.195:53832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:20.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-139.178.70.109:22-139.178.68.195:53832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:20.746384 sshd[7730]: pam_unix(sshd:session): session closed for user core Jul 10 01:21:20.772000 audit[7730]: USER_END pid=7730 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.782877 kernel: audit: type=1106 audit(1752110480.772:2071): pid=7730 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.784058 kernel: audit: type=1104 audit(1752110480.778:2072): pid=7730 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.778000 audit[7730]: CRED_DISP pid=7730 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.794833 systemd[1]: sshd@47-139.178.70.109:22-139.178.68.195:38238.service: Deactivated successfully. Jul 10 01:21:20.795438 systemd[1]: session-22.scope: Deactivated successfully. Jul 10 01:21:20.793000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-139.178.70.109:22-139.178.68.195:38238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:20.800220 kernel: audit: type=1131 audit(1752110480.793:2073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@47-139.178.70.109:22-139.178.68.195:38238 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:20.798780 systemd-logind[1256]: Session 22 logged out. Waiting for processes to exit. Jul 10 01:21:20.799634 systemd-logind[1256]: Removed session 22. Jul 10 01:21:20.860000 audit[7810]: USER_ACCT pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.864777 sshd[7810]: Accepted publickey for core from 139.178.68.195 port 53832 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:21:20.865356 kernel: audit: type=1101 audit(1752110480.860:2074): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.868970 kernel: audit: type=1103 audit(1752110480.864:2075): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.864000 audit[7810]: CRED_ACQ pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.871020 kernel: audit: type=1006 audit(1752110480.864:2076): pid=7810 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 10 01:21:20.864000 audit[7810]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd07973810 a2=3 a3=0 items=0 ppid=1 pid=7810 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:20.878855 kernel: audit: type=1300 audit(1752110480.864:2076): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd07973810 a2=3 a3=0 items=0 ppid=1 pid=7810 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:20.878919 kernel: audit: type=1327 audit(1752110480.864:2076): proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:20.864000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:20.878364 systemd[1]: Started session-23.scope. Jul 10 01:21:20.871385 sshd[7810]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:21:20.879203 systemd-logind[1256]: New session 23 of user core. Jul 10 01:21:20.881000 audit[7810]: USER_START pid=7810 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.886367 kernel: audit: type=1105 audit(1752110480.881:2077): pid=7810 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.885000 audit[7814]: CRED_ACQ pid=7814 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:20.905000 audit[7815]: NETFILTER_CFG table=filter:154 family=2 entries=20 op=nft_register_rule pid=7815 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:21:20.905000 audit[7815]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc8ef39300 a2=0 a3=7ffc8ef392ec items=0 ppid=2305 pid=7815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:20.905000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:21:20.910000 audit[7815]: NETFILTER_CFG table=nat:155 family=2 entries=26 op=nft_register_rule pid=7815 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:21:20.910000 audit[7815]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc8ef39300 a2=0 a3=0 items=0 ppid=2305 pid=7815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:20.910000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:21:21.850602 sshd[7810]: pam_unix(sshd:session): session closed for user core Jul 10 01:21:21.852000 audit[7810]: USER_END pid=7810 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:21.852000 audit[7810]: CRED_DISP pid=7810 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:21.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-139.178.70.109:22-139.178.68.195:53838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:21.853643 systemd[1]: Started sshd@49-139.178.70.109:22-139.178.68.195:53838.service. Jul 10 01:21:21.859540 systemd[1]: sshd@48-139.178.70.109:22-139.178.68.195:53832.service: Deactivated successfully. Jul 10 01:21:21.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@48-139.178.70.109:22-139.178.68.195:53832 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:21.860162 systemd[1]: session-23.scope: Deactivated successfully. Jul 10 01:21:21.860961 systemd-logind[1256]: Session 23 logged out. Waiting for processes to exit. Jul 10 01:21:21.861796 systemd-logind[1256]: Removed session 23. Jul 10 01:21:21.909000 audit[7823]: USER_ACCT pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:21.910690 sshd[7823]: Accepted publickey for core from 139.178.68.195 port 53838 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:21:21.910000 audit[7823]: CRED_ACQ pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:21.910000 audit[7823]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc43159c80 a2=3 a3=0 items=0 ppid=1 pid=7823 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:21.910000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:21.911912 sshd[7823]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:21:21.915926 systemd-logind[1256]: New session 24 of user core. Jul 10 01:21:21.916562 systemd[1]: Started session-24.scope. Jul 10 01:21:21.918000 audit[7823]: USER_START pid=7823 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:21.919000 audit[7826]: CRED_ACQ pid=7826 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:22.098503 sshd[7823]: pam_unix(sshd:session): session closed for user core Jul 10 01:21:22.098000 audit[7823]: USER_END pid=7823 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:22.098000 audit[7823]: CRED_DISP pid=7823 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:22.100000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@49-139.178.70.109:22-139.178.68.195:53838 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:22.101806 systemd[1]: sshd@49-139.178.70.109:22-139.178.68.195:53838.service: Deactivated successfully. Jul 10 01:21:22.102312 systemd[1]: session-24.scope: Deactivated successfully. Jul 10 01:21:22.103231 systemd-logind[1256]: Session 24 logged out. Waiting for processes to exit. Jul 10 01:21:22.103899 systemd-logind[1256]: Removed session 24. Jul 10 01:21:25.670364 systemd[1]: run-containerd-runc-k8s.io-670dbac2c68fc2a67ba1670fb9896d18ffd51f49e17708e48624bbeddf21d7a1-runc.wZG8YH.mount: Deactivated successfully. Jul 10 01:21:27.106697 systemd[1]: Started sshd@50-139.178.70.109:22-139.178.68.195:53844.service. Jul 10 01:21:27.112793 kernel: kauditd_printk_skb: 21 callbacks suppressed Jul 10 01:21:27.119197 kernel: audit: type=1130 audit(1752110487.105:2093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-139.178.70.109:22-139.178.68.195:53844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:27.105000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-139.178.70.109:22-139.178.68.195:53844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:27.250000 audit[7859]: USER_ACCT pid=7859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.252402 sshd[7859]: Accepted publickey for core from 139.178.68.195 port 53844 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:21:27.254000 audit[7859]: CRED_ACQ pid=7859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.258493 kernel: audit: type=1101 audit(1752110487.250:2094): pid=7859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.260532 kernel: audit: type=1103 audit(1752110487.254:2095): pid=7859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.263825 kernel: audit: type=1006 audit(1752110487.254:2096): pid=7859 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 10 01:21:27.263877 kernel: audit: type=1300 audit(1752110487.254:2096): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde1603250 a2=3 a3=0 items=0 ppid=1 pid=7859 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:27.263901 kernel: audit: type=1327 audit(1752110487.254:2096): proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:27.254000 audit[7859]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde1603250 a2=3 a3=0 items=0 ppid=1 pid=7859 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:27.254000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:27.266353 sshd[7859]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:21:27.274866 systemd-logind[1256]: New session 25 of user core. Jul 10 01:21:27.277000 audit[7859]: USER_START pid=7859 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.281000 audit[7861]: CRED_ACQ pid=7861 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.287827 kernel: audit: type=1105 audit(1752110487.277:2097): pid=7859 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.287875 kernel: audit: type=1103 audit(1752110487.281:2098): pid=7861 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.275481 systemd[1]: Started session-25.scope. Jul 10 01:21:27.493480 sshd[7859]: pam_unix(sshd:session): session closed for user core Jul 10 01:21:27.492000 audit[7859]: USER_END pid=7859 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.492000 audit[7859]: CRED_DISP pid=7859 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.500799 kernel: audit: type=1106 audit(1752110487.492:2099): pid=7859 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.500855 kernel: audit: type=1104 audit(1752110487.492:2100): pid=7859 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:27.501084 systemd[1]: sshd@50-139.178.70.109:22-139.178.68.195:53844.service: Deactivated successfully. Jul 10 01:21:27.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@50-139.178.70.109:22-139.178.68.195:53844 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:27.501605 systemd[1]: session-25.scope: Deactivated successfully. Jul 10 01:21:27.502322 systemd-logind[1256]: Session 25 logged out. Waiting for processes to exit. Jul 10 01:21:27.502942 systemd-logind[1256]: Removed session 25. Jul 10 01:21:29.618470 kubelet[2155]: I0710 01:21:29.618320 2155 scope.go:117] "RemoveContainer" containerID="853fa0ba157435f5ecd8316067fe1f1bbc8504a2b2919c2732e0a6a4659647ad" Jul 10 01:21:29.621591 kubelet[2155]: I0710 01:21:29.621572 2155 scope.go:117] "RemoveContainer" containerID="c8e705162608962b0e61ec1bf61b6fbaa28a3792c3b3ba779f16ce3192f3f2a5" Jul 10 01:21:29.675304 env[1271]: time="2025-07-10T01:21:29.675268010Z" level=info msg="CreateContainer within sandbox \"2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:3,}" Jul 10 01:21:29.698111 env[1271]: time="2025-07-10T01:21:29.675986945Z" level=info msg="CreateContainer within sandbox \"e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:3,}" Jul 10 01:21:29.706800 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1765566072.mount: Deactivated successfully. Jul 10 01:21:29.712187 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1631973119.mount: Deactivated successfully. Jul 10 01:21:29.715890 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1873247537.mount: Deactivated successfully. Jul 10 01:21:29.718564 env[1271]: time="2025-07-10T01:21:29.718525665Z" level=info msg="CreateContainer within sandbox \"2bebe18adca5e5d9cbdc7a8be74409a032c1f469cfa870aad60e4d9f1ee6270e\" for &ContainerMetadata{Name:kube-scheduler,Attempt:3,} returns container id \"4f43c16dce7058c9195e5b656621d9f3c8b24695435ba3b2c66d7ead6de739eb\"" Jul 10 01:21:29.718983 env[1271]: time="2025-07-10T01:21:29.718957784Z" level=info msg="CreateContainer within sandbox \"e9a686eaade3419c7530351a57b973223ad16879ad8f76700f091e71a012bb75\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:3,} returns container id \"34b9936e7329ae00b6523a44a0371ca7e5c427ed34ff2e7bf7f7d0d15bc93f3b\"" Jul 10 01:21:29.720204 env[1271]: time="2025-07-10T01:21:29.720162741Z" level=info msg="StartContainer for \"4f43c16dce7058c9195e5b656621d9f3c8b24695435ba3b2c66d7ead6de739eb\"" Jul 10 01:21:29.721013 env[1271]: time="2025-07-10T01:21:29.720525941Z" level=info msg="StartContainer for \"34b9936e7329ae00b6523a44a0371ca7e5c427ed34ff2e7bf7f7d0d15bc93f3b\"" Jul 10 01:21:29.747327 systemd[1]: Started cri-containerd-34b9936e7329ae00b6523a44a0371ca7e5c427ed34ff2e7bf7f7d0d15bc93f3b.scope. Jul 10 01:21:29.755852 systemd[1]: Started cri-containerd-4f43c16dce7058c9195e5b656621d9f3c8b24695435ba3b2c66d7ead6de739eb.scope. Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.792000 audit: BPF prog-id=271 op=LOAD Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000151c48 a2=10 a3=1c items=0 ppid=1855 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466343363313664636537303538633931393565356236353636323164 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001516b0 a2=3c a3=8 items=0 ppid=1855 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466343363313664636537303538633931393565356236353636323164 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit: BPF prog-id=272 op=LOAD Jul 10 01:21:29.793000 audit[7887]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001519d8 a2=78 a3=c0003786e0 items=0 ppid=1855 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466343363313664636537303538633931393565356236353636323164 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit: BPF prog-id=273 op=LOAD Jul 10 01:21:29.793000 audit[7887]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000151770 a2=78 a3=c000378728 items=0 ppid=1855 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466343363313664636537303538633931393565356236353636323164 Jul 10 01:21:29.793000 audit: BPF prog-id=273 op=UNLOAD Jul 10 01:21:29.793000 audit: BPF prog-id=272 op=UNLOAD Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { perfmon } for pid=7887 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit[7887]: AVC avc: denied { bpf } for pid=7887 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.793000 audit: BPF prog-id=274 op=LOAD Jul 10 01:21:29.793000 audit[7887]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000151c30 a2=78 a3=c000378b38 items=0 ppid=1855 pid=7887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.793000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466343363313664636537303538633931393565356236353636323164 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit: BPF prog-id=275 op=LOAD Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1839 pid=7886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623939333665373332396165303062363532336134346130333731 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1839 pid=7886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623939333665373332396165303062363532336134346130333731 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.794000 audit: BPF prog-id=276 op=LOAD Jul 10 01:21:29.794000 audit[7886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00028b840 items=0 ppid=1839 pid=7886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.794000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623939333665373332396165303062363532336134346130333731 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit: BPF prog-id=277 op=LOAD Jul 10 01:21:29.795000 audit[7886]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00028b888 items=0 ppid=1839 pid=7886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623939333665373332396165303062363532336134346130333731 Jul 10 01:21:29.795000 audit: BPF prog-id=277 op=UNLOAD Jul 10 01:21:29.795000 audit: BPF prog-id=276 op=UNLOAD Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { perfmon } for pid=7886 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit[7886]: AVC avc: denied { bpf } for pid=7886 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:29.795000 audit: BPF prog-id=278 op=LOAD Jul 10 01:21:29.795000 audit[7886]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00028bc98 items=0 ppid=1839 pid=7886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:29.795000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334623939333665373332396165303062363532336134346130333731 Jul 10 01:21:29.849851 env[1271]: time="2025-07-10T01:21:29.829850437Z" level=info msg="StartContainer for \"34b9936e7329ae00b6523a44a0371ca7e5c427ed34ff2e7bf7f7d0d15bc93f3b\" returns successfully" Jul 10 01:21:29.849851 env[1271]: time="2025-07-10T01:21:29.839699314Z" level=info msg="StartContainer for \"4f43c16dce7058c9195e5b656621d9f3c8b24695435ba3b2c66d7ead6de739eb\" returns successfully" Jul 10 01:21:30.478000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:30.478000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c005d963e0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:21:30.478000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:21:30.511000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:30.511000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00fa99320 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:21:30.511000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:21:30.623000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:30.623000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0080ffb30 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:21:30.623000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:21:30.650000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:30.650000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0080ffbc0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:21:30.650000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:21:30.676000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:30.676000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00330a5c0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:21:30.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:21:30.676000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:30.676000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c00fa99350 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:21:30.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:21:31.942000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:31.942000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000af9980 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:21:31.942000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:21:31.942000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:31.942000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0002e97e0 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:21:31.942000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:21:32.523055 systemd[1]: Started sshd@51-139.178.70.109:22-139.178.68.195:36678.service. Jul 10 01:21:32.539403 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 10 01:21:32.555259 kernel: audit: type=1130 audit(1752110492.524:2146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-139.178.70.109:22-139.178.68.195:36678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:32.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-139.178.70.109:22-139.178.68.195:36678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:32.663348 kubelet[2155]: I0710 01:21:32.663224 2155 scope.go:117] "RemoveContainer" containerID="71b193b9bf7131777389501c8262589e0cb4ffb0ad5db820182247407865746d" Jul 10 01:21:32.732796 env[1271]: time="2025-07-10T01:21:32.732770227Z" level=info msg="CreateContainer within sandbox \"186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5\" for container &ContainerMetadata{Name:tigera-operator,Attempt:3,}" Jul 10 01:21:32.778657 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount405227494.mount: Deactivated successfully. Jul 10 01:21:32.784064 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount807557511.mount: Deactivated successfully. Jul 10 01:21:32.786603 env[1271]: time="2025-07-10T01:21:32.786577191Z" level=info msg="CreateContainer within sandbox \"186d92cf9cf5ec1a023756bc9f08b1cba23b6a284b5e8d7ee09d03cea873b0f5\" for &ContainerMetadata{Name:tigera-operator,Attempt:3,} returns container id \"8bff4a394aa24d25d11399ce63b2c6522fec3ead019444fd8a750440047b110a\"" Jul 10 01:21:32.787546 env[1271]: time="2025-07-10T01:21:32.787528041Z" level=info msg="StartContainer for \"8bff4a394aa24d25d11399ce63b2c6522fec3ead019444fd8a750440047b110a\"" Jul 10 01:21:32.814719 systemd[1]: Started cri-containerd-8bff4a394aa24d25d11399ce63b2c6522fec3ead019444fd8a750440047b110a.scope. Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.863255 kernel: audit: type=1400 audit(1752110492.832:2147): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.863341 kernel: audit: type=1400 audit(1752110492.832:2148): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.863365 kernel: audit: type=1400 audit(1752110492.832:2149): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.863408 kernel: audit: type=1400 audit(1752110492.832:2150): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.865576 kernel: audit: type=1400 audit(1752110492.832:2151): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.865612 kernel: audit: type=1400 audit(1752110492.832:2152): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.865632 kernel: audit: type=1400 audit(1752110492.832:2153): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.865654 kernel: audit: type=1400 audit(1752110492.832:2154): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.866238 kernel: audit: type=1400 audit(1752110492.832:2155): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit: BPF prog-id=279 op=LOAD Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2253 pid=7959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:32.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862666634613339346161323464323564313133393963653633623263 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2253 pid=7959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:32.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862666634613339346161323464323564313133393963653633623263 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.832000 audit: BPF prog-id=280 op=LOAD Jul 10 01:21:32.832000 audit[7959]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0001afcd0 items=0 ppid=2253 pid=7959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:32.832000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862666634613339346161323464323564313133393963653633623263 Jul 10 01:21:32.840000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.840000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.840000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.840000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.840000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.840000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.840000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.840000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.840000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.840000 audit: BPF prog-id=281 op=LOAD Jul 10 01:21:32.840000 audit[7959]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0001afd18 items=0 ppid=2253 pid=7959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:32.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862666634613339346161323464323564313133393963653633623263 Jul 10 01:21:32.845000 audit: BPF prog-id=281 op=UNLOAD Jul 10 01:21:32.845000 audit: BPF prog-id=280 op=UNLOAD Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { perfmon } for pid=7959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit[7959]: AVC avc: denied { bpf } for pid=7959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 01:21:32.845000 audit: BPF prog-id=282 op=LOAD Jul 10 01:21:32.845000 audit[7959]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000234128 items=0 ppid=2253 pid=7959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:32.845000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3862666634613339346161323464323564313133393963653633623263 Jul 10 01:21:32.861000 audit[7945]: USER_ACCT pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:32.863000 audit[7945]: CRED_ACQ pid=7945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:32.863000 audit[7945]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe3c6c7d0 a2=3 a3=0 items=0 ppid=1 pid=7945 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:32.863000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:32.902990 sshd[7945]: Accepted publickey for core from 139.178.68.195 port 36678 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:21:32.868014 sshd[7945]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:21:32.903322 env[1271]: time="2025-07-10T01:21:32.870827029Z" level=info msg="StartContainer for \"8bff4a394aa24d25d11399ce63b2c6522fec3ead019444fd8a750440047b110a\" returns successfully" Jul 10 01:21:32.905224 systemd-logind[1256]: New session 26 of user core. Jul 10 01:21:32.905764 systemd[1]: Started session-26.scope. Jul 10 01:21:32.907000 audit[7945]: USER_START pid=7945 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:32.908000 audit[7983]: CRED_ACQ pid=7983 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:35.020762 sshd[7945]: pam_unix(sshd:session): session closed for user core Jul 10 01:21:35.065000 audit[7945]: USER_END pid=7945 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:35.066000 audit[7945]: CRED_DISP pid=7945 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:35.122000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@51-139.178.70.109:22-139.178.68.195:36678 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:35.117261 systemd[1]: sshd@51-139.178.70.109:22-139.178.68.195:36678.service: Deactivated successfully. Jul 10 01:21:35.134065 systemd[1]: session-26.scope: Deactivated successfully. Jul 10 01:21:35.134667 systemd-logind[1256]: Session 26 logged out. Waiting for processes to exit. Jul 10 01:21:35.178431 systemd-logind[1256]: Removed session 26. Jul 10 01:21:36.857899 systemd[1]: run-containerd-runc-k8s.io-b019170615e62d5d96e7b4d7c7db24be0d86d97779cfd47df04491b7b5291511-runc.OatwWh.mount: Deactivated successfully. Jul 10 01:21:40.064666 kernel: kauditd_printk_skb: 58 callbacks suppressed Jul 10 01:21:40.083347 kernel: audit: type=1130 audit(1752110500.057:2173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-139.178.70.109:22-139.178.68.195:34508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:40.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-139.178.70.109:22-139.178.68.195:34508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:40.057196 systemd[1]: Started sshd@52-139.178.70.109:22-139.178.68.195:34508.service. Jul 10 01:21:40.374000 audit[8044]: USER_ACCT pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:40.395825 kernel: audit: type=1101 audit(1752110500.374:2174): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:40.395882 kernel: audit: type=1103 audit(1752110500.379:2175): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:40.395910 kernel: audit: type=1006 audit(1752110500.382:2176): pid=8044 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 10 01:21:40.395932 kernel: audit: type=1300 audit(1752110500.382:2176): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff29e7ade0 a2=3 a3=0 items=0 ppid=1 pid=8044 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:40.396216 kernel: audit: type=1327 audit(1752110500.382:2176): proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:40.379000 audit[8044]: CRED_ACQ pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:40.382000 audit[8044]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff29e7ade0 a2=3 a3=0 items=0 ppid=1 pid=8044 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:40.382000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:40.391818 sshd[8044]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:21:40.448104 sshd[8044]: Accepted publickey for core from 139.178.68.195 port 34508 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:21:40.487360 systemd-logind[1256]: New session 27 of user core. Jul 10 01:21:40.543797 kernel: audit: type=1105 audit(1752110500.499:2177): pid=8044 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:40.543868 kernel: audit: type=1103 audit(1752110500.500:2178): pid=8046 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:40.499000 audit[8044]: USER_START pid=8044 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:40.500000 audit[8046]: CRED_ACQ pid=8046 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:40.496399 systemd[1]: Started session-27.scope. Jul 10 01:21:42.606590 sshd[8044]: pam_unix(sshd:session): session closed for user core Jul 10 01:21:42.710410 kernel: audit: type=1106 audit(1752110502.609:2179): pid=8044 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:42.717109 kernel: audit: type=1104 audit(1752110502.613:2180): pid=8044 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:42.609000 audit[8044]: USER_END pid=8044 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:42.613000 audit[8044]: CRED_DISP pid=8044 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:42.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@52-139.178.70.109:22-139.178.68.195:34508 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:42.680573 systemd[1]: sshd@52-139.178.70.109:22-139.178.68.195:34508.service: Deactivated successfully. Jul 10 01:21:42.709648 systemd[1]: session-27.scope: Deactivated successfully. Jul 10 01:21:42.710313 systemd-logind[1256]: Session 27 logged out. Waiting for processes to exit. Jul 10 01:21:42.714799 systemd-logind[1256]: Removed session 27. Jul 10 01:21:43.416856 systemd[1]: sshd@37-139.178.70.109:22-218.78.46.81:43482.service: Deactivated successfully. Jul 10 01:21:43.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@37-139.178.70.109:22-218.78.46.81:43482 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:47.636356 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 10 01:21:47.649445 kernel: audit: type=1130 audit(1752110507.633:2183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-139.178.70.109:22-139.178.68.195:34510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:47.633000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-139.178.70.109:22-139.178.68.195:34510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:47.634603 systemd[1]: Started sshd@53-139.178.70.109:22-139.178.68.195:34510.service. Jul 10 01:21:47.875000 audit[8057]: USER_ACCT pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:47.892652 kernel: audit: type=1101 audit(1752110507.875:2184): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:47.892708 kernel: audit: type=1103 audit(1752110507.879:2185): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:47.892730 kernel: audit: type=1006 audit(1752110507.879:2186): pid=8057 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=28 res=1 Jul 10 01:21:47.894050 kernel: audit: type=1300 audit(1752110507.879:2186): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc357d8070 a2=3 a3=0 items=0 ppid=1 pid=8057 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:47.894075 kernel: audit: type=1327 audit(1752110507.879:2186): proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:47.879000 audit[8057]: CRED_ACQ pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:47.879000 audit[8057]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc357d8070 a2=3 a3=0 items=0 ppid=1 pid=8057 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:47.879000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:47.918000 audit[8057]: USER_START pid=8057 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:47.924073 sshd[8057]: Accepted publickey for core from 139.178.68.195 port 34510 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:21:47.928399 kernel: audit: type=1105 audit(1752110507.918:2187): pid=8057 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:47.929427 kernel: audit: type=1103 audit(1752110507.919:2188): pid=8059 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:47.919000 audit[8059]: CRED_ACQ pid=8059 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:47.890467 sshd[8057]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:21:47.915864 systemd[1]: Started session-28.scope. Jul 10 01:21:47.916276 systemd-logind[1256]: New session 28 of user core. Jul 10 01:21:48.469112 sshd[8057]: pam_unix(sshd:session): session closed for user core Jul 10 01:21:48.468000 audit[8057]: USER_END pid=8057 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:48.480397 kernel: audit: type=1106 audit(1752110508.468:2189): pid=8057 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:48.480614 kernel: audit: type=1104 audit(1752110508.473:2190): pid=8057 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:48.473000 audit[8057]: CRED_DISP pid=8057 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:48.477000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@53-139.178.70.109:22-139.178.68.195:34510 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:48.478368 systemd-logind[1256]: Session 28 logged out. Waiting for processes to exit. Jul 10 01:21:48.478607 systemd[1]: sshd@53-139.178.70.109:22-139.178.68.195:34510.service: Deactivated successfully. Jul 10 01:21:48.479128 systemd[1]: session-28.scope: Deactivated successfully. Jul 10 01:21:48.481042 systemd-logind[1256]: Removed session 28. Jul 10 01:21:49.200000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:49.200000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000157fe0 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:21:49.200000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:21:49.200000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:49.200000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000cd5400 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:21:49.200000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:21:49.200000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:49.200000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00007aae0 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:21:49.200000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:21:49.201000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:21:49.201000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00007b700 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:21:49.201000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:21:49.342000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:21:49.342000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000504c00 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:21:49.342000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:21:49.345000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=7285 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 01:21:49.345000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000657c70 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:21:49.345000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:21:49.351000 audit[8068]: AVC avc: denied { execute } for pid=8068 comm="kube-controller" name="uds" dev="sda9" ino=7466 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 10 01:21:49.351000 audit[8068]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c000657ea0 a1=c000b150c8 a2=c000bec100 a3=0 items=0 ppid=7905 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:21:49.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:21:51.101000 audit[8071]: NETFILTER_CFG table=filter:156 family=2 entries=32 op=nft_register_rule pid=8071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:21:51.101000 audit[8071]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffcdfc154d0 a2=0 a3=7ffcdfc154bc items=0 ppid=2305 pid=8071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:51.101000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:21:51.107000 audit[8071]: NETFILTER_CFG table=nat:157 family=2 entries=40 op=nft_register_rule pid=8071 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:21:51.107000 audit[8071]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffcdfc154d0 a2=0 a3=7ffcdfc154bc items=0 ppid=2305 pid=8071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:51.107000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:21:51.136000 audit[8073]: NETFILTER_CFG table=filter:158 family=2 entries=32 op=nft_register_rule pid=8073 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:21:51.136000 audit[8073]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fff808a53f0 a2=0 a3=7fff808a53dc items=0 ppid=2305 pid=8073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:51.136000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:21:51.143000 audit[8073]: NETFILTER_CFG table=nat:159 family=2 entries=26 op=nft_register_rule pid=8073 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:21:51.143000 audit[8073]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7fff808a53f0 a2=0 a3=0 items=0 ppid=2305 pid=8073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:51.143000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:21:51.208000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@54-139.178.70.109:22-218.78.46.81:55018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:51.206110 systemd[1]: Started sshd@54-139.178.70.109:22-218.78.46.81:55018.service. Jul 10 01:21:53.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-139.178.70.109:22-95.228.113.208:39892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:53.494589 kernel: kauditd_printk_skb: 35 callbacks suppressed Jul 10 01:21:53.506889 kernel: audit: type=1130 audit(1752110513.428:2204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-139.178.70.109:22-95.228.113.208:39892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:53.513847 kernel: audit: type=1130 audit(1752110513.470:2205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-139.178.70.109:22-139.178.68.195:51020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:53.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-139.178.70.109:22-139.178.68.195:51020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:53.429892 systemd[1]: Started sshd@55-139.178.70.109:22-95.228.113.208:39892.service. Jul 10 01:21:53.471745 systemd[1]: Started sshd@56-139.178.70.109:22-139.178.68.195:51020.service. Jul 10 01:21:53.668000 audit[8079]: USER_ACCT pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:53.690350 kernel: audit: type=1101 audit(1752110513.668:2206): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:53.690461 kernel: audit: type=1103 audit(1752110513.677:2207): pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:53.690487 kernel: audit: type=1006 audit(1752110513.677:2208): pid=8079 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=29 res=1 Jul 10 01:21:53.692494 kernel: audit: type=1300 audit(1752110513.677:2208): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7e7919f0 a2=3 a3=0 items=0 ppid=1 pid=8079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:53.692565 kernel: audit: type=1327 audit(1752110513.677:2208): proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:53.677000 audit[8079]: CRED_ACQ pid=8079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:53.677000 audit[8079]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7e7919f0 a2=3 a3=0 items=0 ppid=1 pid=8079 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:53.677000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 01:21:53.725770 sshd[8079]: Accepted publickey for core from 139.178.68.195 port 51020 ssh2: RSA SHA256:NVpdRDPpwzjVTzi6orhe1cA9BvcYymCSReGH8myOy/Q Jul 10 01:21:53.690712 sshd[8079]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 01:21:53.795293 systemd-logind[1256]: New session 29 of user core. Jul 10 01:21:53.798662 systemd[1]: Started session-29.scope. Jul 10 01:21:53.801000 audit[8079]: USER_START pid=8079 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:53.806435 kernel: audit: type=1105 audit(1752110513.801:2209): pid=8079 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:53.802000 audit[8082]: CRED_ACQ pid=8082 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:53.811798 kernel: audit: type=1103 audit(1752110513.802:2210): pid=8082 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:21:54.965903 sshd[8077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.228.113.208 user=root Jul 10 01:21:55.020277 kernel: audit: type=1100 audit(1752110514.967:2211): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=95.228.113.208 addr=95.228.113.208 terminal=ssh res=failed' Jul 10 01:21:54.967000 audit[8077]: USER_AUTH pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=95.228.113.208 addr=95.228.113.208 terminal=ssh res=failed' Jul 10 01:21:56.612843 sshd[8077]: Failed password for root from 95.228.113.208 port 39892 ssh2 Jul 10 01:21:57.314662 sshd[8077]: Received disconnect from 95.228.113.208 port 39892:11: Bye Bye [preauth] Jul 10 01:21:57.314662 sshd[8077]: Disconnected from authenticating user root 95.228.113.208 port 39892 [preauth] Jul 10 01:21:57.577708 systemd[1]: sshd@55-139.178.70.109:22-95.228.113.208:39892.service: Deactivated successfully. Jul 10 01:21:57.612000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@55-139.178.70.109:22-95.228.113.208:39892 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:21:58.151000 audit[8092]: NETFILTER_CFG table=filter:160 family=2 entries=20 op=nft_register_rule pid=8092 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:21:58.151000 audit[8092]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc706085b0 a2=0 a3=7ffc7060859c items=0 ppid=2305 pid=8092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:58.151000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:21:58.159000 audit[8092]: NETFILTER_CFG table=nat:161 family=2 entries=110 op=nft_register_chain pid=8092 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 01:21:58.159000 audit[8092]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffc706085b0 a2=0 a3=7ffc7060859c items=0 ppid=2305 pid=8092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 01:21:58.159000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 01:21:58.284000 audit[4396]: AVC avc: denied { watch } for pid=4396 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_08_29.3966243/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c470,c893 tclass=file permissive=0 Jul 10 01:21:58.284000 audit[4396]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0023ac840 a2=fc6 a3=0 items=0 ppid=4214 pid=4396 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c470,c893 key=(null) Jul 10 01:21:58.284000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:22:15.797000 audit[6252]: AVC avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:22:16.103921 kernel: kauditd_printk_skb: 10 callbacks suppressed Jul 10 01:22:16.111227 kernel: audit: type=1400 audit(1752110535.797:2216): avc: denied { watch } for pid=6252 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_01_15_12.1939195199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c597,c918 tclass=file permissive=0 Jul 10 01:22:16.112289 kernel: audit: type=1300 audit(1752110535.797:2216): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002a71d60 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:22:16.113068 kernel: audit: type=1327 audit(1752110535.797:2216): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:22:15.797000 audit[6252]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002a71d60 a2=fc6 a3=0 items=0 ppid=6062 pid=6252 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c597,c918 key=(null) Jul 10 01:22:15.797000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 01:22:18.211471 systemd[1]: Started sshd@57-139.178.70.109:22-45.119.81.249:40820.service. Jul 10 01:22:18.374852 kernel: audit: type=1130 audit(1752110538.236:2217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-139.178.70.109:22-45.119.81.249:40820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:22:18.236000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-139.178.70.109:22-45.119.81.249:40820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:22:19.671462 sshd[8100]: Invalid user postgres from 45.119.81.249 port 40820 Jul 10 01:22:19.829696 kernel: audit: type=1100 audit(1752110539.722:2218): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="postgres" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:22:19.722000 audit[8100]: USER_AUTH pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:authentication grantors=? acct="postgres" exe="/usr/sbin/sshd" hostname=45.119.81.249 addr=45.119.81.249 terminal=ssh res=failed' Jul 10 01:22:19.719476 sshd[8100]: pam_faillock(sshd:auth): User unknown Jul 10 01:22:19.723594 sshd[8100]: pam_unix(sshd:auth): check pass; user unknown Jul 10 01:22:19.723625 sshd[8100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.119.81.249 Jul 10 01:22:19.723946 sshd[8100]: pam_faillock(sshd:auth): User unknown Jul 10 01:22:22.156211 sshd[8100]: Failed password for invalid user postgres from 45.119.81.249 port 40820 ssh2 Jul 10 01:22:22.743270 sshd[8100]: Received disconnect from 45.119.81.249 port 40820:11: Bye Bye [preauth] Jul 10 01:22:22.743270 sshd[8100]: Disconnected from invalid user postgres 45.119.81.249 port 40820 [preauth] Jul 10 01:22:22.795965 systemd[1]: sshd@57-139.178.70.109:22-45.119.81.249:40820.service: Deactivated successfully. Jul 10 01:22:22.819706 kernel: audit: type=1131 audit(1752110542.808:2219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-139.178.70.109:22-45.119.81.249:40820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:22:22.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@57-139.178.70.109:22-45.119.81.249:40820 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:22:30.515000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.680470 kernel: audit: type=1400 audit(1752110550.515:2220): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.687310 kernel: audit: type=1300 audit(1752110550.515:2220): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c007afb840 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:22:30.689827 kernel: audit: type=1327 audit(1752110550.515:2220): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:22:30.689868 kernel: audit: type=1400 audit(1752110550.523:2221): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.691474 kernel: audit: type=1300 audit(1752110550.523:2221): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00feea600 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:22:30.692401 kernel: audit: type=1327 audit(1752110550.523:2221): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:22:30.692450 kernel: audit: type=1400 audit(1752110550.623:2222): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.692473 kernel: audit: type=1300 audit(1752110550.623:2222): arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c012462270 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:22:30.692502 kernel: audit: type=1327 audit(1752110550.623:2222): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:22:30.692520 kernel: audit: type=1400 audit(1752110550.650:2223): avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.515000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c007afb840 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:22:30.515000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:22:30.523000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.523000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c00feea600 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:22:30.523000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:22:30.623000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.623000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c012462270 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:22:30.623000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:22:30.650000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.650000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c012462300 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:22:30.650000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:22:30.675000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.675000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6e a1=c0107ea510 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:22:30.675000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:22:30.676000 audit[2024]: AVC avc: denied { watch } for pid=2024 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:30.676000 audit[2024]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c005128aa0 a2=fc6 a3=0 items=0 ppid=1881 pid=2024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c219,c606 key=(null) Jul 10 01:22:30.676000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 10 01:22:31.972000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:31.972000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002e86e10 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:22:31.972000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:22:31.979000 audit[7905]: AVC avc: denied { watch } for pid=7905 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 01:22:31.979000 audit[7905]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002e47ec0 a2=fc6 a3=0 items=0 ppid=1839 pid=7905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c203,c242 key=(null) Jul 10 01:22:31.979000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 01:22:35.815817 sshd[8079]: pam_unix(sshd:session): session closed for user core Jul 10 01:22:35.972715 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 10 01:22:35.983501 kernel: audit: type=1106 audit(1752110555.876:2228): pid=8079 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:22:35.991502 kernel: audit: type=1104 audit(1752110555.881:2229): pid=8079 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:22:35.993772 kernel: audit: type=1131 audit(1752110555.892:2230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-139.178.70.109:22-139.178.68.195:51020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:22:35.876000 audit[8079]: USER_END pid=8079 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:22:35.881000 audit[8079]: CRED_DISP pid=8079 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.68.195 addr=139.178.68.195 terminal=ssh res=success' Jul 10 01:22:35.892000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@56-139.178.70.109:22-139.178.68.195:51020 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 01:22:35.887655 systemd[1]: sshd@56-139.178.70.109:22-139.178.68.195:51020.service: Deactivated successfully. Jul 10 01:22:35.896567 systemd[1]: session-29.scope: Deactivated successfully. Jul 10 01:22:35.896690 systemd[1]: session-29.scope: Consumed 4.181s CPU time. Jul 10 01:22:35.898247 systemd-logind[1256]: Session 29 logged out. Waiting for processes to exit. Jul 10 01:22:35.919539 systemd-logind[1256]: Removed session 29. Jul 10 01:22:37.045897 kubelet[2155]: W0710 01:22:36.522524 2155 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@57-139.178.70.109:22-45.119.81.249:40820.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@57-139.178.70.109:22-45.119.81.249:40820.service: no such file or directory Jul 10 01:22:37.265151 kubelet[2155]: I0710 01:22:37.261628 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.269796 kubelet[2155]: I0710 01:22:37.269767 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.271111 kubelet[2155]: I0710 01:22:37.269811 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.271111 kubelet[2155]: I0710 01:22:37.269844 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.271111 kubelet[2155]: I0710 01:22:37.269864 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.273605 kubelet[2155]: I0710 01:22:37.269880 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.274535 kubelet[2155]: I0710 01:22:37.273618 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.274535 kubelet[2155]: I0710 01:22:37.273646 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.274535 kubelet[2155]: I0710 01:22:37.274443 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.275497 kubelet[2155]: I0710 01:22:37.274625 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.275497 kubelet[2155]: I0710 01:22:37.274674 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.275497 kubelet[2155]: I0710 01:22:37.274725 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"node-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.275497 kubelet[2155]: I0710 01:22:37.274756 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.275497 kubelet[2155]: I0710 01:22:37.274778 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-proxy\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.275497 kubelet[2155]: I0710 01:22:37.274815 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.277038 kubelet[2155]: I0710 01:22:37.274838 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.322867 kubelet[2155]: I0710 01:22:37.322796 2155 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.323041 kubelet[2155]: I0710 01:22:37.323025 2155 reflector.go:556] "Warning: watch ended with error" reflector="pkg/kubelet/config/apiserver.go:66" type="*v1.Pod" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.364004 kubelet[2155]: I0710 01:22:37.363973 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.419983 kubelet[2155]: I0710 01:22:37.419943 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kubernetes-services-endpoint\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 10 01:22:37.428709 kubelet[2155]: I0710 01:22:37.428671 2155 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"coredns\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding"