Jul 10 00:29:27.729111 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 10 00:29:27.729131 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Wed Jul 9 23:19:15 -00 2025 Jul 10 00:29:27.729139 kernel: efi: EFI v2.70 by EDK II Jul 10 00:29:27.729145 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 10 00:29:27.729150 kernel: random: crng init done Jul 10 00:29:27.729155 kernel: ACPI: Early table checksum verification disabled Jul 10 00:29:27.729161 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 10 00:29:27.729167 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 10 00:29:27.729173 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:29:27.729178 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:29:27.729184 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:29:27.729189 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:29:27.729194 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:29:27.729199 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:29:27.729207 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:29:27.729213 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:29:27.729219 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:29:27.729232 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 10 00:29:27.729238 kernel: NUMA: Failed to initialise from firmware Jul 10 00:29:27.729244 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 10 00:29:27.729250 kernel: NUMA: NODE_DATA [mem 0xdcb0c900-0xdcb11fff] Jul 10 00:29:27.729255 kernel: Zone ranges: Jul 10 00:29:27.729261 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 10 00:29:27.729268 kernel: DMA32 empty Jul 10 00:29:27.729273 kernel: Normal empty Jul 10 00:29:27.729279 kernel: Movable zone start for each node Jul 10 00:29:27.729284 kernel: Early memory node ranges Jul 10 00:29:27.729290 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 10 00:29:27.729296 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 10 00:29:27.729301 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 10 00:29:27.729307 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 10 00:29:27.729336 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 10 00:29:27.729342 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 10 00:29:27.729347 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 10 00:29:27.729353 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 10 00:29:27.729361 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 10 00:29:27.729366 kernel: psci: probing for conduit method from ACPI. Jul 10 00:29:27.729372 kernel: psci: PSCIv1.1 detected in firmware. Jul 10 00:29:27.729377 kernel: psci: Using standard PSCI v0.2 function IDs Jul 10 00:29:27.729383 kernel: psci: Trusted OS migration not required Jul 10 00:29:27.729391 kernel: psci: SMC Calling Convention v1.1 Jul 10 00:29:27.729397 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 10 00:29:27.729404 kernel: ACPI: SRAT not present Jul 10 00:29:27.729410 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 10 00:29:27.729416 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 10 00:29:27.729422 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 10 00:29:27.729428 kernel: Detected PIPT I-cache on CPU0 Jul 10 00:29:27.729434 kernel: CPU features: detected: GIC system register CPU interface Jul 10 00:29:27.729440 kernel: CPU features: detected: Hardware dirty bit management Jul 10 00:29:27.729446 kernel: CPU features: detected: Spectre-v4 Jul 10 00:29:27.729452 kernel: CPU features: detected: Spectre-BHB Jul 10 00:29:27.729459 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 10 00:29:27.729465 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 10 00:29:27.729470 kernel: CPU features: detected: ARM erratum 1418040 Jul 10 00:29:27.729476 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 10 00:29:27.729482 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 10 00:29:27.729488 kernel: Policy zone: DMA Jul 10 00:29:27.729495 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=97626bbec4e8c603c151f40dbbae5fabba3cda417023e06335ea30183b36a27f Jul 10 00:29:27.729502 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 00:29:27.729508 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 10 00:29:27.729514 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 00:29:27.729520 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 00:29:27.729527 kernel: Memory: 2457344K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114944K reserved, 0K cma-reserved) Jul 10 00:29:27.729533 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 10 00:29:27.729539 kernel: trace event string verifier disabled Jul 10 00:29:27.729545 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 10 00:29:27.729552 kernel: rcu: RCU event tracing is enabled. Jul 10 00:29:27.729559 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 10 00:29:27.729565 kernel: Trampoline variant of Tasks RCU enabled. Jul 10 00:29:27.729572 kernel: Tracing variant of Tasks RCU enabled. Jul 10 00:29:27.729578 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 00:29:27.729584 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 10 00:29:27.729591 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 10 00:29:27.729598 kernel: GICv3: 256 SPIs implemented Jul 10 00:29:27.729604 kernel: GICv3: 0 Extended SPIs implemented Jul 10 00:29:27.729611 kernel: GICv3: Distributor has no Range Selector support Jul 10 00:29:27.729617 kernel: Root IRQ handler: gic_handle_irq Jul 10 00:29:27.729622 kernel: GICv3: 16 PPIs implemented Jul 10 00:29:27.729628 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 10 00:29:27.729634 kernel: ACPI: SRAT not present Jul 10 00:29:27.729640 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 10 00:29:27.729646 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 10 00:29:27.729653 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 10 00:29:27.729659 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 10 00:29:27.729665 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 10 00:29:27.729673 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:29:27.729679 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 10 00:29:27.729686 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 10 00:29:27.729692 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 10 00:29:27.729698 kernel: arm-pv: using stolen time PV Jul 10 00:29:27.729704 kernel: Console: colour dummy device 80x25 Jul 10 00:29:27.729710 kernel: ACPI: Core revision 20210730 Jul 10 00:29:27.729716 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 10 00:29:27.729723 kernel: pid_max: default: 32768 minimum: 301 Jul 10 00:29:27.729729 kernel: LSM: Security Framework initializing Jul 10 00:29:27.729736 kernel: SELinux: Initializing. Jul 10 00:29:27.729742 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:29:27.729749 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:29:27.729755 kernel: rcu: Hierarchical SRCU implementation. Jul 10 00:29:27.729761 kernel: Platform MSI: ITS@0x8080000 domain created Jul 10 00:29:27.729767 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 10 00:29:27.729773 kernel: Remapping and enabling EFI services. Jul 10 00:29:27.729779 kernel: smp: Bringing up secondary CPUs ... Jul 10 00:29:27.729785 kernel: Detected PIPT I-cache on CPU1 Jul 10 00:29:27.729792 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 10 00:29:27.729799 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 10 00:29:27.729805 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:29:27.729811 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 10 00:29:27.729817 kernel: Detected PIPT I-cache on CPU2 Jul 10 00:29:27.729823 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 10 00:29:27.729830 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 10 00:29:27.729836 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:29:27.729842 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 10 00:29:27.729848 kernel: Detected PIPT I-cache on CPU3 Jul 10 00:29:27.729855 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 10 00:29:27.729862 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 10 00:29:27.729868 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:29:27.729874 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 10 00:29:27.729884 kernel: smp: Brought up 1 node, 4 CPUs Jul 10 00:29:27.729891 kernel: SMP: Total of 4 processors activated. Jul 10 00:29:27.729898 kernel: CPU features: detected: 32-bit EL0 Support Jul 10 00:29:27.729904 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 10 00:29:27.729911 kernel: CPU features: detected: Common not Private translations Jul 10 00:29:27.729917 kernel: CPU features: detected: CRC32 instructions Jul 10 00:29:27.729924 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 10 00:29:27.729930 kernel: CPU features: detected: LSE atomic instructions Jul 10 00:29:27.729938 kernel: CPU features: detected: Privileged Access Never Jul 10 00:29:27.729944 kernel: CPU features: detected: RAS Extension Support Jul 10 00:29:27.729951 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 10 00:29:27.729957 kernel: CPU: All CPU(s) started at EL1 Jul 10 00:29:27.729964 kernel: alternatives: patching kernel code Jul 10 00:29:27.729971 kernel: devtmpfs: initialized Jul 10 00:29:27.729977 kernel: KASLR enabled Jul 10 00:29:27.729984 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 00:29:27.729990 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 10 00:29:27.729997 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 00:29:27.730003 kernel: SMBIOS 3.0.0 present. Jul 10 00:29:27.730009 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 10 00:29:27.730016 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 00:29:27.730022 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 10 00:29:27.730030 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 10 00:29:27.730036 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 10 00:29:27.730043 kernel: audit: initializing netlink subsys (disabled) Jul 10 00:29:27.730049 kernel: audit: type=2000 audit(0.029:1): state=initialized audit_enabled=0 res=1 Jul 10 00:29:27.730056 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 00:29:27.730062 kernel: cpuidle: using governor menu Jul 10 00:29:27.730069 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 10 00:29:27.730075 kernel: ASID allocator initialised with 32768 entries Jul 10 00:29:27.730081 kernel: ACPI: bus type PCI registered Jul 10 00:29:27.730089 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 00:29:27.730095 kernel: Serial: AMBA PL011 UART driver Jul 10 00:29:27.730102 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 00:29:27.730108 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 10 00:29:27.730114 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 00:29:27.730121 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 10 00:29:27.730127 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 00:29:27.730134 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 10 00:29:27.730140 kernel: ACPI: Added _OSI(Module Device) Jul 10 00:29:27.730147 kernel: ACPI: Added _OSI(Processor Device) Jul 10 00:29:27.730154 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 00:29:27.730160 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 00:29:27.730167 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 00:29:27.730173 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 00:29:27.730179 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 00:29:27.730186 kernel: ACPI: Interpreter enabled Jul 10 00:29:27.730192 kernel: ACPI: Using GIC for interrupt routing Jul 10 00:29:27.730198 kernel: ACPI: MCFG table detected, 1 entries Jul 10 00:29:27.730206 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 10 00:29:27.730212 kernel: printk: console [ttyAMA0] enabled Jul 10 00:29:27.730219 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 10 00:29:27.730363 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 00:29:27.730426 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 10 00:29:27.730481 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 10 00:29:27.730535 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 10 00:29:27.730592 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 10 00:29:27.730600 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 10 00:29:27.730607 kernel: PCI host bridge to bus 0000:00 Jul 10 00:29:27.730667 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 10 00:29:27.730717 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 10 00:29:27.730769 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 10 00:29:27.730818 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 10 00:29:27.730889 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 10 00:29:27.730955 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 10 00:29:27.731014 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 10 00:29:27.731079 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 10 00:29:27.731137 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 10 00:29:27.731194 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 10 00:29:27.731258 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 10 00:29:27.731344 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 10 00:29:27.731400 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 10 00:29:27.731450 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 10 00:29:27.731501 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 10 00:29:27.731510 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 10 00:29:27.731516 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 10 00:29:27.731523 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 10 00:29:27.731530 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 10 00:29:27.731538 kernel: iommu: Default domain type: Translated Jul 10 00:29:27.731545 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 10 00:29:27.731551 kernel: vgaarb: loaded Jul 10 00:29:27.731558 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 00:29:27.731565 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 00:29:27.731571 kernel: PTP clock support registered Jul 10 00:29:27.731578 kernel: Registered efivars operations Jul 10 00:29:27.731584 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 10 00:29:27.731591 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 00:29:27.731599 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 00:29:27.731605 kernel: pnp: PnP ACPI init Jul 10 00:29:27.731675 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 10 00:29:27.731684 kernel: pnp: PnP ACPI: found 1 devices Jul 10 00:29:27.731691 kernel: NET: Registered PF_INET protocol family Jul 10 00:29:27.731698 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 10 00:29:27.731704 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 10 00:29:27.731711 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 00:29:27.731719 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 00:29:27.731725 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 10 00:29:27.731732 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 10 00:29:27.731738 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:29:27.731745 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:29:27.731752 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 00:29:27.731758 kernel: PCI: CLS 0 bytes, default 64 Jul 10 00:29:27.731765 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 10 00:29:27.731771 kernel: kvm [1]: HYP mode not available Jul 10 00:29:27.731779 kernel: Initialise system trusted keyrings Jul 10 00:29:27.731785 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 10 00:29:27.731792 kernel: Key type asymmetric registered Jul 10 00:29:27.731798 kernel: Asymmetric key parser 'x509' registered Jul 10 00:29:27.731805 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 00:29:27.731811 kernel: io scheduler mq-deadline registered Jul 10 00:29:27.731817 kernel: io scheduler kyber registered Jul 10 00:29:27.731824 kernel: io scheduler bfq registered Jul 10 00:29:27.731830 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 10 00:29:27.731838 kernel: ACPI: button: Power Button [PWRB] Jul 10 00:29:27.731845 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 10 00:29:27.731899 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 10 00:29:27.731908 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 00:29:27.731914 kernel: thunder_xcv, ver 1.0 Jul 10 00:29:27.731921 kernel: thunder_bgx, ver 1.0 Jul 10 00:29:27.731927 kernel: nicpf, ver 1.0 Jul 10 00:29:27.731933 kernel: nicvf, ver 1.0 Jul 10 00:29:27.731996 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 10 00:29:27.732050 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-10T00:29:27 UTC (1752107367) Jul 10 00:29:27.732058 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 10 00:29:27.732065 kernel: NET: Registered PF_INET6 protocol family Jul 10 00:29:27.732071 kernel: Segment Routing with IPv6 Jul 10 00:29:27.732078 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 00:29:27.732084 kernel: NET: Registered PF_PACKET protocol family Jul 10 00:29:27.732091 kernel: Key type dns_resolver registered Jul 10 00:29:27.732097 kernel: registered taskstats version 1 Jul 10 00:29:27.732105 kernel: Loading compiled-in X.509 certificates Jul 10 00:29:27.732112 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 9e274a0dc4fc3d34232d90d226b034c4fe0e3e22' Jul 10 00:29:27.732118 kernel: Key type .fscrypt registered Jul 10 00:29:27.732124 kernel: Key type fscrypt-provisioning registered Jul 10 00:29:27.732131 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 00:29:27.732138 kernel: ima: Allocated hash algorithm: sha1 Jul 10 00:29:27.732144 kernel: ima: No architecture policies found Jul 10 00:29:27.732151 kernel: clk: Disabling unused clocks Jul 10 00:29:27.732157 kernel: Freeing unused kernel memory: 36416K Jul 10 00:29:27.732165 kernel: Run /init as init process Jul 10 00:29:27.732172 kernel: with arguments: Jul 10 00:29:27.732178 kernel: /init Jul 10 00:29:27.732184 kernel: with environment: Jul 10 00:29:27.732190 kernel: HOME=/ Jul 10 00:29:27.732196 kernel: TERM=linux Jul 10 00:29:27.732203 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 00:29:27.732211 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:29:27.732221 systemd[1]: Detected virtualization kvm. Jul 10 00:29:27.732233 systemd[1]: Detected architecture arm64. Jul 10 00:29:27.732240 systemd[1]: Running in initrd. Jul 10 00:29:27.732247 systemd[1]: No hostname configured, using default hostname. Jul 10 00:29:27.732253 systemd[1]: Hostname set to . Jul 10 00:29:27.732261 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:29:27.732268 systemd[1]: Queued start job for default target initrd.target. Jul 10 00:29:27.732274 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:29:27.732283 systemd[1]: Reached target cryptsetup.target. Jul 10 00:29:27.732289 systemd[1]: Reached target paths.target. Jul 10 00:29:27.732296 systemd[1]: Reached target slices.target. Jul 10 00:29:27.732303 systemd[1]: Reached target swap.target. Jul 10 00:29:27.732380 systemd[1]: Reached target timers.target. Jul 10 00:29:27.732390 systemd[1]: Listening on iscsid.socket. Jul 10 00:29:27.732397 systemd[1]: Listening on iscsiuio.socket. Jul 10 00:29:27.732407 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 00:29:27.732414 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 00:29:27.732421 systemd[1]: Listening on systemd-journald.socket. Jul 10 00:29:27.732428 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:29:27.732435 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:29:27.732442 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:29:27.732449 systemd[1]: Reached target sockets.target. Jul 10 00:29:27.732456 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:29:27.732463 systemd[1]: Finished network-cleanup.service. Jul 10 00:29:27.732471 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 00:29:27.732478 systemd[1]: Starting systemd-journald.service... Jul 10 00:29:27.732485 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:29:27.732492 systemd[1]: Starting systemd-resolved.service... Jul 10 00:29:27.732499 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 00:29:27.732505 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:29:27.732513 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 00:29:27.732519 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:29:27.732530 systemd-journald[289]: Journal started Jul 10 00:29:27.732572 systemd-journald[289]: Runtime Journal (/run/log/journal/ad79bb1501da4f87860e78bf19524a89) is 6.0M, max 48.7M, 42.6M free. Jul 10 00:29:27.732603 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 00:29:27.722058 systemd-modules-load[290]: Inserted module 'overlay' Jul 10 00:29:27.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.738326 kernel: audit: type=1130 audit(1752107367.734:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.738352 systemd[1]: Started systemd-journald.service. Jul 10 00:29:27.743440 kernel: audit: type=1130 audit(1752107367.738:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.740080 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 00:29:27.745108 systemd-resolved[291]: Positive Trust Anchors: Jul 10 00:29:27.745125 systemd-resolved[291]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:29:27.748783 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 00:29:27.745153 systemd-resolved[291]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:29:27.749000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.748527 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:29:27.758587 kernel: audit: type=1130 audit(1752107367.749:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.749332 systemd-resolved[291]: Defaulting to hostname 'linux'. Jul 10 00:29:27.762385 kernel: audit: type=1130 audit(1752107367.757:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.757000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.750146 systemd[1]: Started systemd-resolved.service. Jul 10 00:29:27.757911 systemd[1]: Reached target nss-lookup.target. Jul 10 00:29:27.765746 systemd-modules-load[290]: Inserted module 'br_netfilter' Jul 10 00:29:27.766618 kernel: Bridge firewalling registered Jul 10 00:29:27.769302 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 00:29:27.771654 systemd[1]: Starting dracut-cmdline.service... Jul 10 00:29:27.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.776351 kernel: audit: type=1130 audit(1752107367.770:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.780337 kernel: SCSI subsystem initialized Jul 10 00:29:27.780818 dracut-cmdline[307]: dracut-dracut-053 Jul 10 00:29:27.783776 dracut-cmdline[307]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=97626bbec4e8c603c151f40dbbae5fabba3cda417023e06335ea30183b36a27f Jul 10 00:29:27.792391 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 00:29:27.792424 kernel: device-mapper: uevent: version 1.0.3 Jul 10 00:29:27.793458 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 00:29:27.796251 systemd-modules-load[290]: Inserted module 'dm_multipath' Jul 10 00:29:27.797015 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:29:27.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.798716 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:29:27.802271 kernel: audit: type=1130 audit(1752107367.797:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.808063 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:29:27.808000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.812374 kernel: audit: type=1130 audit(1752107367.808:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.852339 kernel: Loading iSCSI transport class v2.0-870. Jul 10 00:29:27.864332 kernel: iscsi: registered transport (tcp) Jul 10 00:29:27.880703 kernel: iscsi: registered transport (qla4xxx) Jul 10 00:29:27.880759 kernel: QLogic iSCSI HBA Driver Jul 10 00:29:27.917481 systemd[1]: Finished dracut-cmdline.service. Jul 10 00:29:27.917000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.919109 systemd[1]: Starting dracut-pre-udev.service... Jul 10 00:29:27.922508 kernel: audit: type=1130 audit(1752107367.917:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:27.963351 kernel: raid6: neonx8 gen() 13734 MB/s Jul 10 00:29:27.980341 kernel: raid6: neonx8 xor() 10813 MB/s Jul 10 00:29:27.997337 kernel: raid6: neonx4 gen() 13478 MB/s Jul 10 00:29:28.014339 kernel: raid6: neonx4 xor() 11014 MB/s Jul 10 00:29:28.031339 kernel: raid6: neonx2 gen() 12952 MB/s Jul 10 00:29:28.048335 kernel: raid6: neonx2 xor() 10249 MB/s Jul 10 00:29:28.065339 kernel: raid6: neonx1 gen() 10596 MB/s Jul 10 00:29:28.082352 kernel: raid6: neonx1 xor() 8740 MB/s Jul 10 00:29:28.099350 kernel: raid6: int64x8 gen() 6256 MB/s Jul 10 00:29:28.116347 kernel: raid6: int64x8 xor() 3542 MB/s Jul 10 00:29:28.133361 kernel: raid6: int64x4 gen() 7217 MB/s Jul 10 00:29:28.150349 kernel: raid6: int64x4 xor() 3845 MB/s Jul 10 00:29:28.167359 kernel: raid6: int64x2 gen() 6143 MB/s Jul 10 00:29:28.184354 kernel: raid6: int64x2 xor() 3320 MB/s Jul 10 00:29:28.201351 kernel: raid6: int64x1 gen() 5041 MB/s Jul 10 00:29:28.218419 kernel: raid6: int64x1 xor() 2644 MB/s Jul 10 00:29:28.218434 kernel: raid6: using algorithm neonx8 gen() 13734 MB/s Jul 10 00:29:28.218443 kernel: raid6: .... xor() 10813 MB/s, rmw enabled Jul 10 00:29:28.219499 kernel: raid6: using neon recovery algorithm Jul 10 00:29:28.229336 kernel: xor: measuring software checksum speed Jul 10 00:29:28.230682 kernel: 8regs : 15380 MB/sec Jul 10 00:29:28.230693 kernel: 32regs : 20712 MB/sec Jul 10 00:29:28.231935 kernel: arm64_neon : 27682 MB/sec Jul 10 00:29:28.231952 kernel: xor: using function: arm64_neon (27682 MB/sec) Jul 10 00:29:28.286340 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 10 00:29:28.296903 systemd[1]: Finished dracut-pre-udev.service. Jul 10 00:29:28.297000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:28.300000 audit: BPF prog-id=7 op=LOAD Jul 10 00:29:28.300000 audit: BPF prog-id=8 op=LOAD Jul 10 00:29:28.301088 systemd[1]: Starting systemd-udevd.service... Jul 10 00:29:28.302547 kernel: audit: type=1130 audit(1752107368.297:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:28.315045 systemd-udevd[490]: Using default interface naming scheme 'v252'. Jul 10 00:29:28.318337 systemd[1]: Started systemd-udevd.service. Jul 10 00:29:28.319000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:28.321100 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 00:29:28.331289 dracut-pre-trigger[501]: rd.md=0: removing MD RAID activation Jul 10 00:29:28.357786 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 00:29:28.358000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:28.359421 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:29:28.393191 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:29:28.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:28.432342 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 10 00:29:28.437298 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 10 00:29:28.437324 kernel: GPT:9289727 != 19775487 Jul 10 00:29:28.437333 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 10 00:29:28.437342 kernel: GPT:9289727 != 19775487 Jul 10 00:29:28.437350 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 10 00:29:28.437358 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:29:28.459057 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 00:29:28.460150 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 00:29:28.464322 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (540) Jul 10 00:29:28.466417 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 00:29:28.469921 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 00:29:28.475153 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:29:28.476904 systemd[1]: Starting disk-uuid.service... Jul 10 00:29:28.483084 disk-uuid[562]: Primary Header is updated. Jul 10 00:29:28.483084 disk-uuid[562]: Secondary Entries is updated. Jul 10 00:29:28.483084 disk-uuid[562]: Secondary Header is updated. Jul 10 00:29:28.487329 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:29:29.501330 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:29:29.503769 disk-uuid[563]: The operation has completed successfully. Jul 10 00:29:29.541126 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 00:29:29.541000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.541000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.541211 systemd[1]: Finished disk-uuid.service. Jul 10 00:29:29.542827 systemd[1]: Starting verity-setup.service... Jul 10 00:29:29.565340 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 10 00:29:29.603554 systemd[1]: Found device dev-mapper-usr.device. Jul 10 00:29:29.606291 systemd[1]: Mounting sysusr-usr.mount... Jul 10 00:29:29.607168 systemd[1]: Finished verity-setup.service. Jul 10 00:29:29.607000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.667350 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 00:29:29.666682 systemd[1]: Mounted sysusr-usr.mount. Jul 10 00:29:29.667531 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 10 00:29:29.668244 systemd[1]: Starting ignition-setup.service... Jul 10 00:29:29.671085 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 00:29:29.687576 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 10 00:29:29.687621 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:29:29.687630 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:29:29.699346 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 00:29:29.708493 systemd[1]: Finished ignition-setup.service. Jul 10 00:29:29.708000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.710100 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 00:29:29.766922 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 00:29:29.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.768000 audit: BPF prog-id=9 op=LOAD Jul 10 00:29:29.769622 systemd[1]: Starting systemd-networkd.service... Jul 10 00:29:29.797733 systemd-networkd[739]: lo: Link UP Jul 10 00:29:29.797749 systemd-networkd[739]: lo: Gained carrier Jul 10 00:29:29.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.798133 systemd-networkd[739]: Enumeration completed Jul 10 00:29:29.798286 systemd[1]: Started systemd-networkd.service. Jul 10 00:29:29.798338 systemd-networkd[739]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:29:29.799272 systemd-networkd[739]: eth0: Link UP Jul 10 00:29:29.799275 systemd-networkd[739]: eth0: Gained carrier Jul 10 00:29:29.800392 systemd[1]: Reached target network.target. Jul 10 00:29:29.803046 systemd[1]: Starting iscsiuio.service... Jul 10 00:29:29.810210 ignition[668]: Ignition 2.14.0 Jul 10 00:29:29.810227 ignition[668]: Stage: fetch-offline Jul 10 00:29:29.810267 ignition[668]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:29:29.810276 ignition[668]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:29:29.810467 ignition[668]: parsed url from cmdline: "" Jul 10 00:29:29.813251 systemd[1]: Started iscsiuio.service. Jul 10 00:29:29.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.810471 ignition[668]: no config URL provided Jul 10 00:29:29.810476 ignition[668]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 00:29:29.815855 systemd[1]: Starting iscsid.service... Jul 10 00:29:29.810485 ignition[668]: no config at "/usr/lib/ignition/user.ign" Jul 10 00:29:29.819704 iscsid[746]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:29:29.819704 iscsid[746]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Jul 10 00:29:29.819704 iscsid[746]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 00:29:29.819704 iscsid[746]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 00:29:29.819704 iscsid[746]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 00:29:29.819704 iscsid[746]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:29:29.819704 iscsid[746]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 00:29:29.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.818388 systemd-networkd[739]: eth0: DHCPv4 address 10.0.0.46/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:29:29.810504 ignition[668]: op(1): [started] loading QEMU firmware config module Jul 10 00:29:29.822539 systemd[1]: Started iscsid.service. Jul 10 00:29:29.810509 ignition[668]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 10 00:29:29.826053 systemd[1]: Starting dracut-initqueue.service... Jul 10 00:29:29.836000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.818916 ignition[668]: op(1): [finished] loading QEMU firmware config module Jul 10 00:29:29.836406 systemd[1]: Finished dracut-initqueue.service. Jul 10 00:29:29.837417 systemd[1]: Reached target remote-fs-pre.target. Jul 10 00:29:29.838889 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:29:29.840675 systemd[1]: Reached target remote-fs.target. Jul 10 00:29:29.842819 systemd[1]: Starting dracut-pre-mount.service... Jul 10 00:29:29.850453 systemd[1]: Finished dracut-pre-mount.service. Jul 10 00:29:29.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.877652 ignition[668]: parsing config with SHA512: 0a45cbfe69aea3552a40bc85dbd3b7ecff02568dce6e687c0ed2aa1ee53eddfa7e4a2e787e0f7e0f7835ae7c546ee8db9739b0f8cb74200cca51a15cba2d0ca2 Jul 10 00:29:29.887803 unknown[668]: fetched base config from "system" Jul 10 00:29:29.887862 unknown[668]: fetched user config from "qemu" Jul 10 00:29:29.888386 ignition[668]: fetch-offline: fetch-offline passed Jul 10 00:29:29.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.889595 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 00:29:29.888444 ignition[668]: Ignition finished successfully Jul 10 00:29:29.891142 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 00:29:29.892206 systemd[1]: Starting ignition-kargs.service... Jul 10 00:29:29.901698 ignition[760]: Ignition 2.14.0 Jul 10 00:29:29.901707 ignition[760]: Stage: kargs Jul 10 00:29:29.901801 ignition[760]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:29:29.901811 ignition[760]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:29:29.902673 ignition[760]: kargs: kargs passed Jul 10 00:29:29.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.904679 systemd[1]: Finished ignition-kargs.service. Jul 10 00:29:29.902716 ignition[760]: Ignition finished successfully Jul 10 00:29:29.907061 systemd[1]: Starting ignition-disks.service... Jul 10 00:29:29.913531 ignition[766]: Ignition 2.14.0 Jul 10 00:29:29.913541 ignition[766]: Stage: disks Jul 10 00:29:29.913636 ignition[766]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:29:29.915545 systemd[1]: Finished ignition-disks.service. Jul 10 00:29:29.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.913645 ignition[766]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:29:29.917053 systemd[1]: Reached target initrd-root-device.target. Jul 10 00:29:29.914514 ignition[766]: disks: disks passed Jul 10 00:29:29.918307 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:29:29.914557 ignition[766]: Ignition finished successfully Jul 10 00:29:29.919997 systemd[1]: Reached target local-fs.target. Jul 10 00:29:29.921341 systemd[1]: Reached target sysinit.target. Jul 10 00:29:29.922490 systemd[1]: Reached target basic.target. Jul 10 00:29:29.924570 systemd[1]: Starting systemd-fsck-root.service... Jul 10 00:29:29.936160 systemd-fsck[774]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 10 00:29:29.940414 systemd[1]: Finished systemd-fsck-root.service. Jul 10 00:29:29.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:29.943256 systemd[1]: Mounting sysroot.mount... Jul 10 00:29:29.951327 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 00:29:29.951651 systemd[1]: Mounted sysroot.mount. Jul 10 00:29:29.952373 systemd[1]: Reached target initrd-root-fs.target. Jul 10 00:29:29.954614 systemd[1]: Mounting sysroot-usr.mount... Jul 10 00:29:29.955466 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 00:29:29.955502 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 00:29:29.955522 systemd[1]: Reached target ignition-diskful.target. Jul 10 00:29:29.957240 systemd[1]: Mounted sysroot-usr.mount. Jul 10 00:29:29.959036 systemd[1]: Starting initrd-setup-root.service... Jul 10 00:29:29.963202 initrd-setup-root[784]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 00:29:29.968842 initrd-setup-root[792]: cut: /sysroot/etc/group: No such file or directory Jul 10 00:29:29.973049 initrd-setup-root[800]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 00:29:29.978432 initrd-setup-root[808]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 00:29:30.007632 systemd[1]: Finished initrd-setup-root.service. Jul 10 00:29:30.008000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:30.009196 systemd[1]: Starting ignition-mount.service... Jul 10 00:29:30.010485 systemd[1]: Starting sysroot-boot.service... Jul 10 00:29:30.014523 bash[825]: umount: /sysroot/usr/share/oem: not mounted. Jul 10 00:29:30.023145 ignition[827]: INFO : Ignition 2.14.0 Jul 10 00:29:30.023145 ignition[827]: INFO : Stage: mount Jul 10 00:29:30.025360 ignition[827]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:29:30.025360 ignition[827]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:29:30.025360 ignition[827]: INFO : mount: mount passed Jul 10 00:29:30.025360 ignition[827]: INFO : Ignition finished successfully Jul 10 00:29:30.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:30.029000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:30.027514 systemd[1]: Finished ignition-mount.service. Jul 10 00:29:30.028743 systemd[1]: Finished sysroot-boot.service. Jul 10 00:29:30.616727 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 00:29:30.623581 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (836) Jul 10 00:29:30.623620 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 10 00:29:30.623630 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:29:30.624812 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:29:30.627472 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 00:29:30.629039 systemd[1]: Starting ignition-files.service... Jul 10 00:29:30.642755 ignition[856]: INFO : Ignition 2.14.0 Jul 10 00:29:30.642755 ignition[856]: INFO : Stage: files Jul 10 00:29:30.644369 ignition[856]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:29:30.644369 ignition[856]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:29:30.644369 ignition[856]: DEBUG : files: compiled without relabeling support, skipping Jul 10 00:29:30.651372 ignition[856]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 00:29:30.651372 ignition[856]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 00:29:30.654381 ignition[856]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 00:29:30.654381 ignition[856]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 00:29:30.654381 ignition[856]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 00:29:30.654154 unknown[856]: wrote ssh authorized keys file for user: core Jul 10 00:29:30.659490 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 10 00:29:30.659490 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Jul 10 00:29:30.751288 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 00:29:30.865785 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 10 00:29:30.867817 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-arm64.raw: attempt #1 Jul 10 00:29:31.091467 systemd-networkd[739]: eth0: Gained IPv6LL Jul 10 00:29:31.298106 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 10 00:29:31.684806 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 10 00:29:31.684806 ignition[856]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 00:29:31.688926 ignition[856]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:29:31.716737 ignition[856]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:29:31.719191 ignition[856]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 00:29:31.719191 ignition[856]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:29:31.719191 ignition[856]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:29:31.719191 ignition[856]: INFO : files: files passed Jul 10 00:29:31.719191 ignition[856]: INFO : Ignition finished successfully Jul 10 00:29:31.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.719368 systemd[1]: Finished ignition-files.service. Jul 10 00:29:31.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.722293 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 00:29:31.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.723794 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 00:29:31.733160 initrd-setup-root-after-ignition[881]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 10 00:29:31.724456 systemd[1]: Starting ignition-quench.service... Jul 10 00:29:31.735909 initrd-setup-root-after-ignition[884]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 00:29:31.727373 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 00:29:31.727449 systemd[1]: Finished ignition-quench.service. Jul 10 00:29:31.728936 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 00:29:31.729951 systemd[1]: Reached target ignition-complete.target. Jul 10 00:29:31.732073 systemd[1]: Starting initrd-parse-etc.service... Jul 10 00:29:31.743380 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 00:29:31.743460 systemd[1]: Finished initrd-parse-etc.service. Jul 10 00:29:31.744000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.745154 systemd[1]: Reached target initrd-fs.target. Jul 10 00:29:31.746422 systemd[1]: Reached target initrd.target. Jul 10 00:29:31.747741 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 00:29:31.748421 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 00:29:31.758098 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 00:29:31.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.759584 systemd[1]: Starting initrd-cleanup.service... Jul 10 00:29:31.766894 systemd[1]: Stopped target nss-lookup.target. Jul 10 00:29:31.767752 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 00:29:31.769175 systemd[1]: Stopped target timers.target. Jul 10 00:29:31.770581 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 00:29:31.771000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.770684 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 00:29:31.771961 systemd[1]: Stopped target initrd.target. Jul 10 00:29:31.773382 systemd[1]: Stopped target basic.target. Jul 10 00:29:31.774635 systemd[1]: Stopped target ignition-complete.target. Jul 10 00:29:31.775941 systemd[1]: Stopped target ignition-diskful.target. Jul 10 00:29:31.777235 systemd[1]: Stopped target initrd-root-device.target. Jul 10 00:29:31.778720 systemd[1]: Stopped target remote-fs.target. Jul 10 00:29:31.780072 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 00:29:31.781484 systemd[1]: Stopped target sysinit.target. Jul 10 00:29:31.782790 systemd[1]: Stopped target local-fs.target. Jul 10 00:29:31.784111 systemd[1]: Stopped target local-fs-pre.target. Jul 10 00:29:31.785415 systemd[1]: Stopped target swap.target. Jul 10 00:29:31.787000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.786632 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 00:29:31.786744 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 00:29:31.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.788062 systemd[1]: Stopped target cryptsetup.target. Jul 10 00:29:31.791000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.789244 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 00:29:31.789362 systemd[1]: Stopped dracut-initqueue.service. Jul 10 00:29:31.790903 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 00:29:31.791001 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 00:29:31.792372 systemd[1]: Stopped target paths.target. Jul 10 00:29:31.793583 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 00:29:31.797358 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 00:29:31.798500 systemd[1]: Stopped target slices.target. Jul 10 00:29:31.800030 systemd[1]: Stopped target sockets.target. Jul 10 00:29:31.801397 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 00:29:31.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.801465 systemd[1]: Closed iscsid.socket. Jul 10 00:29:31.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.802607 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 00:29:31.802704 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 00:29:31.804042 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 00:29:31.804130 systemd[1]: Stopped ignition-files.service. Jul 10 00:29:31.806328 systemd[1]: Stopping ignition-mount.service... Jul 10 00:29:31.807779 systemd[1]: Stopping iscsiuio.service... Jul 10 00:29:31.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.810355 systemd[1]: Stopping sysroot-boot.service... Jul 10 00:29:31.815301 ignition[897]: INFO : Ignition 2.14.0 Jul 10 00:29:31.815301 ignition[897]: INFO : Stage: umount Jul 10 00:29:31.815301 ignition[897]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:29:31.815301 ignition[897]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:29:31.815301 ignition[897]: INFO : umount: umount passed Jul 10 00:29:31.815301 ignition[897]: INFO : Ignition finished successfully Jul 10 00:29:31.816000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.824000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.810999 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 00:29:31.811109 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 00:29:31.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.812441 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 00:29:31.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.812537 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 00:29:31.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.815042 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 00:29:31.815121 systemd[1]: Stopped iscsiuio.service. Jul 10 00:29:31.817172 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 00:29:31.817246 systemd[1]: Closed iscsiuio.socket. Jul 10 00:29:31.818445 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 00:29:31.818516 systemd[1]: Stopped ignition-mount.service. Jul 10 00:29:31.820688 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 00:29:31.821044 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 00:29:31.821108 systemd[1]: Finished initrd-cleanup.service. Jul 10 00:29:31.825348 systemd[1]: Stopped target network.target. Jul 10 00:29:31.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.826989 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 00:29:31.827041 systemd[1]: Stopped ignition-disks.service. Jul 10 00:29:31.828568 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 00:29:31.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.828608 systemd[1]: Stopped ignition-kargs.service. Jul 10 00:29:31.850000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.829955 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 00:29:31.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.829999 systemd[1]: Stopped ignition-setup.service. Jul 10 00:29:31.831549 systemd[1]: Stopping systemd-networkd.service... Jul 10 00:29:31.833050 systemd[1]: Stopping systemd-resolved.service... Jul 10 00:29:31.841365 systemd-networkd[739]: eth0: DHCPv6 lease lost Jul 10 00:29:31.856000 audit: BPF prog-id=9 op=UNLOAD Jul 10 00:29:31.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.842300 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 00:29:31.842414 systemd[1]: Stopped systemd-networkd.service. Jul 10 00:29:31.861000 audit: BPF prog-id=6 op=UNLOAD Jul 10 00:29:31.843806 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 00:29:31.843834 systemd[1]: Closed systemd-networkd.socket. Jul 10 00:29:31.846170 systemd[1]: Stopping network-cleanup.service... Jul 10 00:29:31.862000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.846931 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 00:29:31.865000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.846984 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 00:29:31.849026 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 00:29:31.849064 systemd[1]: Stopped systemd-sysctl.service. Jul 10 00:29:31.869000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.851157 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 00:29:31.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.851194 systemd[1]: Stopped systemd-modules-load.service. Jul 10 00:29:31.872000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.852204 systemd[1]: Stopping systemd-udevd.service... Jul 10 00:29:31.856671 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 00:29:31.857110 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 00:29:31.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.857199 systemd[1]: Stopped systemd-resolved.service. Jul 10 00:29:31.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.861929 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 00:29:31.862069 systemd[1]: Stopped network-cleanup.service. Jul 10 00:29:31.881000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.864593 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 00:29:31.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.864712 systemd[1]: Stopped systemd-udevd.service. Jul 10 00:29:31.865678 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 00:29:31.885000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:31.865712 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 00:29:31.867103 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 00:29:31.867131 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 00:29:31.868465 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 00:29:31.868506 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 00:29:31.870012 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 00:29:31.870049 systemd[1]: Stopped dracut-cmdline.service. Jul 10 00:29:31.871284 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 00:29:31.871339 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 00:29:31.873470 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 00:29:31.874234 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 10 00:29:31.874291 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 10 00:29:31.876850 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 00:29:31.876889 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 00:29:31.877726 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 00:29:31.877761 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 00:29:31.879916 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 10 00:29:31.880356 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 00:29:31.880432 systemd[1]: Stopped sysroot-boot.service. Jul 10 00:29:31.881722 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 00:29:31.881788 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 00:29:31.883122 systemd[1]: Reached target initrd-switch-root.target. Jul 10 00:29:31.884551 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 00:29:31.884598 systemd[1]: Stopped initrd-setup-root.service. Jul 10 00:29:31.886542 systemd[1]: Starting initrd-switch-root.service... Jul 10 00:29:31.892274 systemd[1]: Switching root. Jul 10 00:29:31.911283 iscsid[746]: iscsid shutting down. Jul 10 00:29:31.911936 systemd-journald[289]: Received SIGTERM from PID 1 (n/a). Jul 10 00:29:31.911980 systemd-journald[289]: Journal stopped Jul 10 00:29:33.908079 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 00:29:33.908138 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 00:29:33.908149 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 00:29:33.908159 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 00:29:33.908172 kernel: SELinux: policy capability open_perms=1 Jul 10 00:29:33.908183 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 00:29:33.908193 kernel: SELinux: policy capability always_check_network=0 Jul 10 00:29:33.908213 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 00:29:33.908229 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 00:29:33.908239 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 00:29:33.908248 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 00:29:33.908259 systemd[1]: Successfully loaded SELinux policy in 33.103ms. Jul 10 00:29:33.908280 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.833ms. Jul 10 00:29:33.908291 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:29:33.908303 systemd[1]: Detected virtualization kvm. Jul 10 00:29:33.908326 systemd[1]: Detected architecture arm64. Jul 10 00:29:33.908338 systemd[1]: Detected first boot. Jul 10 00:29:33.908349 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:29:33.908359 kernel: kauditd_printk_skb: 65 callbacks suppressed Jul 10 00:29:33.908369 kernel: audit: type=1400 audit(1752107372.045:76): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:29:33.908384 kernel: audit: type=1400 audit(1752107372.045:77): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:29:33.908394 kernel: audit: type=1334 audit(1752107372.046:78): prog-id=10 op=LOAD Jul 10 00:29:33.908403 kernel: audit: type=1334 audit(1752107372.046:79): prog-id=10 op=UNLOAD Jul 10 00:29:33.908413 kernel: audit: type=1334 audit(1752107372.048:80): prog-id=11 op=LOAD Jul 10 00:29:33.908423 kernel: audit: type=1334 audit(1752107372.048:81): prog-id=11 op=UNLOAD Jul 10 00:29:33.908433 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 00:29:33.908444 kernel: audit: type=1400 audit(1752107372.093:82): avc: denied { associate } for pid=930 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 00:29:33.908455 kernel: audit: type=1300 audit(1752107372.093:82): arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:33.908466 kernel: audit: type=1327 audit(1752107372.093:82): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:29:33.908476 kernel: audit: type=1400 audit(1752107372.094:83): avc: denied { associate } for pid=930 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 00:29:33.908486 systemd[1]: Populated /etc with preset unit settings. Jul 10 00:29:33.908499 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:29:33.908510 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:29:33.908521 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:29:33.908533 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 00:29:33.908544 systemd[1]: Stopped iscsid.service. Jul 10 00:29:33.908555 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 00:29:33.908565 systemd[1]: Stopped initrd-switch-root.service. Jul 10 00:29:33.908576 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 00:29:33.908586 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 00:29:33.908597 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 00:29:33.908607 systemd[1]: Created slice system-getty.slice. Jul 10 00:29:33.908618 systemd[1]: Created slice system-modprobe.slice. Jul 10 00:29:33.908629 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 00:29:33.908640 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 00:29:33.908650 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 00:29:33.908660 systemd[1]: Created slice user.slice. Jul 10 00:29:33.908670 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:29:33.908680 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 00:29:33.908691 systemd[1]: Set up automount boot.automount. Jul 10 00:29:33.908702 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 00:29:33.908714 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 00:29:33.908724 systemd[1]: Stopped target initrd-fs.target. Jul 10 00:29:33.908737 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 00:29:33.908747 systemd[1]: Reached target integritysetup.target. Jul 10 00:29:33.908757 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:29:33.908768 systemd[1]: Reached target remote-fs.target. Jul 10 00:29:33.908779 systemd[1]: Reached target slices.target. Jul 10 00:29:33.908790 systemd[1]: Reached target swap.target. Jul 10 00:29:33.908800 systemd[1]: Reached target torcx.target. Jul 10 00:29:33.908811 systemd[1]: Reached target veritysetup.target. Jul 10 00:29:33.908825 systemd[1]: Listening on systemd-coredump.socket. Jul 10 00:29:33.908835 systemd[1]: Listening on systemd-initctl.socket. Jul 10 00:29:33.908846 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:29:33.908857 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:29:33.908867 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:29:33.908878 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 00:29:33.908888 systemd[1]: Mounting dev-hugepages.mount... Jul 10 00:29:33.908898 systemd[1]: Mounting dev-mqueue.mount... Jul 10 00:29:33.908908 systemd[1]: Mounting media.mount... Jul 10 00:29:33.908919 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 00:29:33.908929 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 00:29:33.908939 systemd[1]: Mounting tmp.mount... Jul 10 00:29:33.908950 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 00:29:33.908961 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:29:33.908972 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:29:33.908982 systemd[1]: Starting modprobe@configfs.service... Jul 10 00:29:33.908992 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:29:33.909003 systemd[1]: Starting modprobe@drm.service... Jul 10 00:29:33.909015 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:29:33.909026 systemd[1]: Starting modprobe@fuse.service... Jul 10 00:29:33.909036 systemd[1]: Starting modprobe@loop.service... Jul 10 00:29:33.909046 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 00:29:33.909056 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 00:29:33.909066 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 00:29:33.909077 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 00:29:33.909087 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 00:29:33.909098 systemd[1]: Stopped systemd-journald.service. Jul 10 00:29:33.909108 kernel: fuse: init (API version 7.34) Jul 10 00:29:33.909119 systemd[1]: Starting systemd-journald.service... Jul 10 00:29:33.909131 kernel: loop: module loaded Jul 10 00:29:33.909141 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:29:33.909151 systemd[1]: Starting systemd-network-generator.service... Jul 10 00:29:33.909161 systemd[1]: Starting systemd-remount-fs.service... Jul 10 00:29:33.909171 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:29:33.909182 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 00:29:33.909191 systemd[1]: Stopped verity-setup.service. Jul 10 00:29:33.909201 systemd[1]: Mounted dev-hugepages.mount. Jul 10 00:29:33.909219 systemd-journald[991]: Journal started Jul 10 00:29:33.909261 systemd-journald[991]: Runtime Journal (/run/log/journal/ad79bb1501da4f87860e78bf19524a89) is 6.0M, max 48.7M, 42.6M free. Jul 10 00:29:31.968000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 00:29:32.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:29:32.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:29:32.046000 audit: BPF prog-id=10 op=LOAD Jul 10 00:29:32.046000 audit: BPF prog-id=10 op=UNLOAD Jul 10 00:29:32.048000 audit: BPF prog-id=11 op=LOAD Jul 10 00:29:32.048000 audit: BPF prog-id=11 op=UNLOAD Jul 10 00:29:32.093000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 00:29:32.093000 audit[930]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:32.093000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:29:32.094000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 00:29:32.094000 audit[930]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5975 a2=1ed a3=0 items=2 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:32.094000 audit: CWD cwd="/" Jul 10 00:29:32.094000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:29:32.094000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:29:32.094000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:29:33.776000 audit: BPF prog-id=12 op=LOAD Jul 10 00:29:33.776000 audit: BPF prog-id=3 op=UNLOAD Jul 10 00:29:33.776000 audit: BPF prog-id=13 op=LOAD Jul 10 00:29:33.776000 audit: BPF prog-id=14 op=LOAD Jul 10 00:29:33.776000 audit: BPF prog-id=4 op=UNLOAD Jul 10 00:29:33.776000 audit: BPF prog-id=5 op=UNLOAD Jul 10 00:29:33.776000 audit: BPF prog-id=15 op=LOAD Jul 10 00:29:33.776000 audit: BPF prog-id=12 op=UNLOAD Jul 10 00:29:33.777000 audit: BPF prog-id=16 op=LOAD Jul 10 00:29:33.777000 audit: BPF prog-id=17 op=LOAD Jul 10 00:29:33.777000 audit: BPF prog-id=13 op=UNLOAD Jul 10 00:29:33.777000 audit: BPF prog-id=14 op=UNLOAD Jul 10 00:29:33.777000 audit: BPF prog-id=18 op=LOAD Jul 10 00:29:33.777000 audit: BPF prog-id=15 op=UNLOAD Jul 10 00:29:33.777000 audit: BPF prog-id=19 op=LOAD Jul 10 00:29:33.777000 audit: BPF prog-id=20 op=LOAD Jul 10 00:29:33.777000 audit: BPF prog-id=16 op=UNLOAD Jul 10 00:29:33.777000 audit: BPF prog-id=17 op=UNLOAD Jul 10 00:29:33.778000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.780000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.789000 audit: BPF prog-id=18 op=UNLOAD Jul 10 00:29:33.880000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.882000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.884000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.885000 audit: BPF prog-id=21 op=LOAD Jul 10 00:29:33.885000 audit: BPF prog-id=22 op=LOAD Jul 10 00:29:33.885000 audit: BPF prog-id=23 op=LOAD Jul 10 00:29:33.885000 audit: BPF prog-id=19 op=UNLOAD Jul 10 00:29:33.885000 audit: BPF prog-id=20 op=UNLOAD Jul 10 00:29:33.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.906000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 00:29:33.906000 audit[991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=fffff5d0ac70 a2=4000 a3=1 items=0 ppid=1 pid=991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:33.906000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 00:29:33.912112 systemd[1]: Started systemd-journald.service. Jul 10 00:29:33.911000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.774875 systemd[1]: Queued start job for default target multi-user.target. Jul 10 00:29:32.091659 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:29:33.774887 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 10 00:29:32.091897 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:29:33.778512 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 00:29:32.091914 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:29:33.911616 systemd[1]: Mounted dev-mqueue.mount. Jul 10 00:29:32.091940 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 00:29:33.912462 systemd[1]: Mounted media.mount. Jul 10 00:29:32.091949 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 00:29:32.091974 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 00:29:32.091985 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 00:29:32.092159 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 00:29:32.092190 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:29:32.092202 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:29:32.092944 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 00:29:32.092981 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 00:29:32.092998 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 00:29:32.093011 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 00:29:32.093028 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 00:29:33.913605 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 00:29:32.093041 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:32Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 00:29:33.526567 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:33Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:29:33.526816 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:33Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:29:33.526911 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:33Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:29:33.527061 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:33Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:29:33.527107 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:33Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 00:29:33.527159 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:29:33Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 00:29:33.914670 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 00:29:33.915544 systemd[1]: Mounted tmp.mount. Jul 10 00:29:33.916467 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:29:33.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.917526 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 00:29:33.917677 systemd[1]: Finished modprobe@configfs.service. Jul 10 00:29:33.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.918000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.918708 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:29:33.918864 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:29:33.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.919903 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:29:33.920063 systemd[1]: Finished modprobe@drm.service. Jul 10 00:29:33.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.920000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.921112 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:29:33.922609 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:29:33.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.923000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.924450 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 00:29:33.924602 systemd[1]: Finished modprobe@fuse.service. Jul 10 00:29:33.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.925614 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:29:33.925765 systemd[1]: Finished modprobe@loop.service. Jul 10 00:29:33.926000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.926000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.926992 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:29:33.927000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.928384 systemd[1]: Finished systemd-network-generator.service. Jul 10 00:29:33.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.929735 systemd[1]: Finished systemd-remount-fs.service. Jul 10 00:29:33.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.931026 systemd[1]: Reached target network-pre.target. Jul 10 00:29:33.933168 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 00:29:33.935124 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 00:29:33.935938 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 00:29:33.939094 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 00:29:33.941158 systemd[1]: Starting systemd-journal-flush.service... Jul 10 00:29:33.942137 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:29:33.943181 systemd[1]: Starting systemd-random-seed.service... Jul 10 00:29:33.944275 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:29:33.945390 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:29:33.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.948867 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 00:29:33.949981 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 00:29:33.951038 systemd-journald[991]: Time spent on flushing to /var/log/journal/ad79bb1501da4f87860e78bf19524a89 is 13.479ms for 1002 entries. Jul 10 00:29:33.951038 systemd-journald[991]: System Journal (/var/log/journal/ad79bb1501da4f87860e78bf19524a89) is 8.0M, max 195.6M, 187.6M free. Jul 10 00:29:33.974115 systemd-journald[991]: Received client request to flush runtime journal. Jul 10 00:29:33.958000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.970000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.951067 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 00:29:33.955493 systemd[1]: Starting systemd-sysusers.service... Jul 10 00:29:33.957957 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:29:33.975551 udevadm[1031]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 10 00:29:33.960480 systemd[1]: Starting systemd-udev-settle.service... Jul 10 00:29:33.964070 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:29:33.969528 systemd[1]: Finished systemd-random-seed.service. Jul 10 00:29:33.970727 systemd[1]: Reached target first-boot-complete.target. Jul 10 00:29:33.975210 systemd[1]: Finished systemd-journal-flush.service. Jul 10 00:29:33.976000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.985170 systemd[1]: Finished systemd-sysusers.service. Jul 10 00:29:33.985000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:33.987215 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:29:34.005589 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:29:34.006000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.330713 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 00:29:34.331000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.331000 audit: BPF prog-id=24 op=LOAD Jul 10 00:29:34.331000 audit: BPF prog-id=25 op=LOAD Jul 10 00:29:34.331000 audit: BPF prog-id=7 op=UNLOAD Jul 10 00:29:34.331000 audit: BPF prog-id=8 op=UNLOAD Jul 10 00:29:34.332914 systemd[1]: Starting systemd-udevd.service... Jul 10 00:29:34.350706 systemd-udevd[1035]: Using default interface naming scheme 'v252'. Jul 10 00:29:34.364762 systemd[1]: Started systemd-udevd.service. Jul 10 00:29:34.365000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.366000 audit: BPF prog-id=26 op=LOAD Jul 10 00:29:34.367873 systemd[1]: Starting systemd-networkd.service... Jul 10 00:29:34.386772 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 10 00:29:34.393000 audit: BPF prog-id=27 op=LOAD Jul 10 00:29:34.393000 audit: BPF prog-id=28 op=LOAD Jul 10 00:29:34.393000 audit: BPF prog-id=29 op=LOAD Jul 10 00:29:34.394542 systemd[1]: Starting systemd-userdbd.service... Jul 10 00:29:34.425257 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:29:34.428508 systemd[1]: Started systemd-userdbd.service. Jul 10 00:29:34.429000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.472761 systemd[1]: Finished systemd-udev-settle.service. Jul 10 00:29:34.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.475034 systemd[1]: Starting lvm2-activation-early.service... Jul 10 00:29:34.481033 systemd-networkd[1044]: lo: Link UP Jul 10 00:29:34.481276 systemd-networkd[1044]: lo: Gained carrier Jul 10 00:29:34.481724 systemd-networkd[1044]: Enumeration completed Jul 10 00:29:34.481899 systemd[1]: Started systemd-networkd.service. Jul 10 00:29:34.481992 systemd-networkd[1044]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:29:34.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.483736 systemd-networkd[1044]: eth0: Link UP Jul 10 00:29:34.483826 systemd-networkd[1044]: eth0: Gained carrier Jul 10 00:29:34.486219 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:29:34.508457 systemd-networkd[1044]: eth0: DHCPv4 address 10.0.0.46/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:29:34.515218 systemd[1]: Finished lvm2-activation-early.service. Jul 10 00:29:34.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.516365 systemd[1]: Reached target cryptsetup.target. Jul 10 00:29:34.518459 systemd[1]: Starting lvm2-activation.service... Jul 10 00:29:34.522080 lvm[1069]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:29:34.562297 systemd[1]: Finished lvm2-activation.service. Jul 10 00:29:34.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.563301 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:29:34.564145 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 00:29:34.564180 systemd[1]: Reached target local-fs.target. Jul 10 00:29:34.565029 systemd[1]: Reached target machines.target. Jul 10 00:29:34.567110 systemd[1]: Starting ldconfig.service... Jul 10 00:29:34.568294 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:29:34.568375 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:29:34.569609 systemd[1]: Starting systemd-boot-update.service... Jul 10 00:29:34.571638 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 00:29:34.573954 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 00:29:34.576383 systemd[1]: Starting systemd-sysext.service... Jul 10 00:29:34.577581 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1071 (bootctl) Jul 10 00:29:34.578825 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 00:29:34.587014 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 00:29:34.587000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.590377 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 00:29:34.597526 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 00:29:34.597711 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 00:29:34.615357 kernel: loop0: detected capacity change from 0 to 203944 Jul 10 00:29:34.656120 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 00:29:34.657000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.662331 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 00:29:34.666770 systemd-fsck[1080]: fsck.fat 4.2 (2021-01-31) Jul 10 00:29:34.666770 systemd-fsck[1080]: /dev/vda1: 236 files, 117310/258078 clusters Jul 10 00:29:34.668247 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 00:29:34.669000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.681384 kernel: loop1: detected capacity change from 0 to 203944 Jul 10 00:29:34.690259 (sd-sysext)[1085]: Using extensions 'kubernetes'. Jul 10 00:29:34.690638 (sd-sysext)[1085]: Merged extensions into '/usr'. Jul 10 00:29:34.712514 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:29:34.713890 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:29:34.716074 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:29:34.718306 systemd[1]: Starting modprobe@loop.service... Jul 10 00:29:34.719265 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:29:34.719403 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:29:34.720140 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:29:34.720280 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:29:34.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.721000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.721734 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:29:34.721854 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:29:34.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.723373 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:29:34.723491 systemd[1]: Finished modprobe@loop.service. Jul 10 00:29:34.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.724000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.724897 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:29:34.724994 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:29:34.770981 ldconfig[1070]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 00:29:34.774558 systemd[1]: Finished ldconfig.service. Jul 10 00:29:34.775000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.908231 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 00:29:34.910756 systemd[1]: Mounting boot.mount... Jul 10 00:29:34.912924 systemd[1]: Mounting usr-share-oem.mount... Jul 10 00:29:34.920637 systemd[1]: Mounted boot.mount. Jul 10 00:29:34.921652 systemd[1]: Mounted usr-share-oem.mount. Jul 10 00:29:34.924160 systemd[1]: Finished systemd-sysext.service. Jul 10 00:29:34.925000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.926690 systemd[1]: Starting ensure-sysext.service... Jul 10 00:29:34.928864 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 00:29:34.933000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:34.932501 systemd[1]: Finished systemd-boot-update.service. Jul 10 00:29:34.935228 systemd[1]: Reloading. Jul 10 00:29:34.939774 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 00:29:34.941439 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 00:29:34.942921 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 00:29:34.981454 /usr/lib/systemd/system-generators/torcx-generator[1114]: time="2025-07-10T00:29:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:29:34.981483 /usr/lib/systemd/system-generators/torcx-generator[1114]: time="2025-07-10T00:29:34Z" level=info msg="torcx already run" Jul 10 00:29:35.049339 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:29:35.049359 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:29:35.065601 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:29:35.111000 audit: BPF prog-id=30 op=LOAD Jul 10 00:29:35.111000 audit: BPF prog-id=27 op=UNLOAD Jul 10 00:29:35.111000 audit: BPF prog-id=31 op=LOAD Jul 10 00:29:35.111000 audit: BPF prog-id=32 op=LOAD Jul 10 00:29:35.111000 audit: BPF prog-id=28 op=UNLOAD Jul 10 00:29:35.111000 audit: BPF prog-id=29 op=UNLOAD Jul 10 00:29:35.111000 audit: BPF prog-id=33 op=LOAD Jul 10 00:29:35.111000 audit: BPF prog-id=34 op=LOAD Jul 10 00:29:35.111000 audit: BPF prog-id=24 op=UNLOAD Jul 10 00:29:35.111000 audit: BPF prog-id=25 op=UNLOAD Jul 10 00:29:35.112000 audit: BPF prog-id=35 op=LOAD Jul 10 00:29:35.112000 audit: BPF prog-id=21 op=UNLOAD Jul 10 00:29:35.112000 audit: BPF prog-id=36 op=LOAD Jul 10 00:29:35.112000 audit: BPF prog-id=37 op=LOAD Jul 10 00:29:35.112000 audit: BPF prog-id=22 op=UNLOAD Jul 10 00:29:35.112000 audit: BPF prog-id=23 op=UNLOAD Jul 10 00:29:35.113000 audit: BPF prog-id=38 op=LOAD Jul 10 00:29:35.113000 audit: BPF prog-id=26 op=UNLOAD Jul 10 00:29:35.115307 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 00:29:35.116000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.120076 systemd[1]: Starting audit-rules.service... Jul 10 00:29:35.122209 systemd[1]: Starting clean-ca-certificates.service... Jul 10 00:29:35.124741 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 00:29:35.129000 audit: BPF prog-id=39 op=LOAD Jul 10 00:29:35.130489 systemd[1]: Starting systemd-resolved.service... Jul 10 00:29:35.133000 audit: BPF prog-id=40 op=LOAD Jul 10 00:29:35.135607 systemd[1]: Starting systemd-timesyncd.service... Jul 10 00:29:35.139076 systemd[1]: Starting systemd-update-utmp.service... Jul 10 00:29:35.140723 systemd[1]: Finished clean-ca-certificates.service. Jul 10 00:29:35.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.143858 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:29:35.144000 audit[1165]: SYSTEM_BOOT pid=1165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.147464 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:29:35.149011 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:29:35.151260 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:29:35.153689 systemd[1]: Starting modprobe@loop.service... Jul 10 00:29:35.154660 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:29:35.154840 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:29:35.154988 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:29:35.156383 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 00:29:35.157000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.158105 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:29:35.158249 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:29:35.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.159748 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:29:35.159908 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:29:35.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.161486 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:29:35.161657 systemd[1]: Finished modprobe@loop.service. Jul 10 00:29:35.162000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.164193 systemd[1]: Finished systemd-update-utmp.service. Jul 10 00:29:35.164000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.166347 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:29:35.167757 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:29:35.169859 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:29:35.171834 systemd[1]: Starting modprobe@loop.service... Jul 10 00:29:35.172679 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:29:35.172798 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:29:35.174052 systemd[1]: Starting systemd-update-done.service... Jul 10 00:29:35.174952 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:29:35.175959 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:29:35.176094 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:29:35.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.176000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.177451 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:29:35.177560 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:29:35.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.178839 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:29:35.178950 systemd[1]: Finished modprobe@loop.service. Jul 10 00:29:35.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.179000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.180207 systemd[1]: Finished systemd-update-done.service. Jul 10 00:29:35.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.183736 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:29:35.185167 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:29:35.187243 systemd[1]: Starting modprobe@drm.service... Jul 10 00:29:35.189232 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:29:35.191234 systemd[1]: Starting modprobe@loop.service... Jul 10 00:29:35.192149 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:29:35.192294 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:29:35.193578 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 00:29:35.194694 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:29:35.195939 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:29:35.196077 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:29:35.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.197000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.198496 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:29:35.198617 systemd[1]: Finished modprobe@drm.service. Jul 10 00:29:35.199000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.199815 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:29:35.199927 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:29:35.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:35.206818 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:29:35.206929 systemd[1]: Finished modprobe@loop.service. Jul 10 00:29:35.208334 systemd-resolved[1159]: Positive Trust Anchors: Jul 10 00:29:35.208346 systemd-resolved[1159]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:29:35.208373 systemd-resolved[1159]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:29:35.208450 systemd-timesyncd[1164]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 10 00:29:35.208000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 00:29:35.208000 audit[1182]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffcffc50c0 a2=420 a3=0 items=0 ppid=1154 pid=1182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:35.208000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 00:29:35.208994 augenrules[1182]: No rules Jul 10 00:29:35.208496 systemd-timesyncd[1164]: Initial clock synchronization to Thu 2025-07-10 00:29:35.273713 UTC. Jul 10 00:29:35.209378 systemd[1]: Started systemd-timesyncd.service. Jul 10 00:29:35.210935 systemd[1]: Finished audit-rules.service. Jul 10 00:29:35.212555 systemd[1]: Reached target time-set.target. Jul 10 00:29:35.213643 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:29:35.213691 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:29:35.213990 systemd[1]: Finished ensure-sysext.service. Jul 10 00:29:35.224869 systemd-resolved[1159]: Defaulting to hostname 'linux'. Jul 10 00:29:35.226325 systemd[1]: Started systemd-resolved.service. Jul 10 00:29:35.227269 systemd[1]: Reached target network.target. Jul 10 00:29:35.228105 systemd[1]: Reached target nss-lookup.target. Jul 10 00:29:35.229004 systemd[1]: Reached target sysinit.target. Jul 10 00:29:35.229915 systemd[1]: Started motdgen.path. Jul 10 00:29:35.230714 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 00:29:35.232025 systemd[1]: Started logrotate.timer. Jul 10 00:29:35.232980 systemd[1]: Started mdadm.timer. Jul 10 00:29:35.233807 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 00:29:35.234752 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 00:29:35.234783 systemd[1]: Reached target paths.target. Jul 10 00:29:35.235598 systemd[1]: Reached target timers.target. Jul 10 00:29:35.236794 systemd[1]: Listening on dbus.socket. Jul 10 00:29:35.238798 systemd[1]: Starting docker.socket... Jul 10 00:29:35.242120 systemd[1]: Listening on sshd.socket. Jul 10 00:29:35.243061 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:29:35.243516 systemd[1]: Listening on docker.socket. Jul 10 00:29:35.244412 systemd[1]: Reached target sockets.target. Jul 10 00:29:35.245268 systemd[1]: Reached target basic.target. Jul 10 00:29:35.246127 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:29:35.246160 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:29:35.247166 systemd[1]: Starting containerd.service... Jul 10 00:29:35.249018 systemd[1]: Starting dbus.service... Jul 10 00:29:35.250831 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 00:29:35.252920 systemd[1]: Starting extend-filesystems.service... Jul 10 00:29:35.253906 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 00:29:35.255219 systemd[1]: Starting motdgen.service... Jul 10 00:29:35.257130 systemd[1]: Starting prepare-helm.service... Jul 10 00:29:35.259237 jq[1196]: false Jul 10 00:29:35.260489 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 00:29:35.266106 systemd[1]: Starting sshd-keygen.service... Jul 10 00:29:35.270536 extend-filesystems[1197]: Found loop1 Jul 10 00:29:35.270536 extend-filesystems[1197]: Found vda Jul 10 00:29:35.270536 extend-filesystems[1197]: Found vda1 Jul 10 00:29:35.270536 extend-filesystems[1197]: Found vda2 Jul 10 00:29:35.270536 extend-filesystems[1197]: Found vda3 Jul 10 00:29:35.270536 extend-filesystems[1197]: Found usr Jul 10 00:29:35.270536 extend-filesystems[1197]: Found vda4 Jul 10 00:29:35.270536 extend-filesystems[1197]: Found vda6 Jul 10 00:29:35.270536 extend-filesystems[1197]: Found vda7 Jul 10 00:29:35.270536 extend-filesystems[1197]: Found vda9 Jul 10 00:29:35.270536 extend-filesystems[1197]: Checking size of /dev/vda9 Jul 10 00:29:35.269086 systemd[1]: Starting systemd-logind.service... Jul 10 00:29:35.269931 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:29:35.270009 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 00:29:35.293372 jq[1215]: true Jul 10 00:29:35.270446 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 00:29:35.271654 systemd[1]: Starting update-engine.service... Jul 10 00:29:35.277028 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 00:29:35.279463 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 00:29:35.279631 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 00:29:35.279916 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 00:29:35.280070 systemd[1]: Finished motdgen.service. Jul 10 00:29:35.281806 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 00:29:35.281974 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 00:29:35.295767 jq[1220]: true Jul 10 00:29:35.309324 extend-filesystems[1197]: Resized partition /dev/vda9 Jul 10 00:29:35.319988 tar[1219]: linux-arm64/helm Jul 10 00:29:35.336185 extend-filesystems[1231]: resize2fs 1.46.5 (30-Dec-2021) Jul 10 00:29:35.353406 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 10 00:29:35.367115 dbus-daemon[1195]: [system] SELinux support is enabled Jul 10 00:29:35.368244 systemd[1]: Started dbus.service. Jul 10 00:29:35.371108 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 00:29:35.371130 systemd[1]: Reached target system-config.target. Jul 10 00:29:35.372837 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 00:29:35.372859 systemd[1]: Reached target user-config.target. Jul 10 00:29:35.380426 systemd-logind[1210]: Watching system buttons on /dev/input/event0 (Power Button) Jul 10 00:29:35.380611 systemd-logind[1210]: New seat seat0. Jul 10 00:29:35.382691 systemd[1]: Started systemd-logind.service. Jul 10 00:29:35.389225 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 10 00:29:35.391166 update_engine[1213]: I0710 00:29:35.390928 1213 main.cc:92] Flatcar Update Engine starting Jul 10 00:29:35.392615 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 00:29:35.410916 extend-filesystems[1231]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 10 00:29:35.410916 extend-filesystems[1231]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 10 00:29:35.410916 extend-filesystems[1231]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 10 00:29:35.416174 bash[1241]: Updated "/home/core/.ssh/authorized_keys" Jul 10 00:29:35.416300 update_engine[1213]: I0710 00:29:35.397182 1213 update_check_scheduler.cc:74] Next update check in 9m28s Jul 10 00:29:35.396996 systemd[1]: Started update-engine.service. Jul 10 00:29:35.416401 extend-filesystems[1197]: Resized filesystem in /dev/vda9 Jul 10 00:29:35.417427 env[1221]: time="2025-07-10T00:29:35.413527120Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 00:29:35.400076 systemd[1]: Started locksmithd.service. Jul 10 00:29:35.412093 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 00:29:35.412270 systemd[1]: Finished extend-filesystems.service. Jul 10 00:29:35.441589 env[1221]: time="2025-07-10T00:29:35.441534320Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 00:29:35.441708 env[1221]: time="2025-07-10T00:29:35.441691920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.442923720Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.442949800Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.443162520Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.443179480Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.443192320Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.443210400Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.443282920Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.443626520Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.443761600Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:29:35.444111 env[1221]: time="2025-07-10T00:29:35.443778360Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 00:29:35.444597 env[1221]: time="2025-07-10T00:29:35.443829800Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 00:29:35.444597 env[1221]: time="2025-07-10T00:29:35.443841120Z" level=info msg="metadata content store policy set" policy=shared Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452193920Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452236320Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452250120Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452283800Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452299600Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452324200Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452338520Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452681840Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452700240Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452714040Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452734720Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452748520Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452861160Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 00:29:35.453487 env[1221]: time="2025-07-10T00:29:35.452930040Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453142320Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453165560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453180800Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453373880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453392000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453404640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453417080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453429440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453442000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453453120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.453794 env[1221]: time="2025-07-10T00:29:35.453463800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.454911 env[1221]: time="2025-07-10T00:29:35.454015280Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 00:29:35.454911 env[1221]: time="2025-07-10T00:29:35.454143480Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.454911 env[1221]: time="2025-07-10T00:29:35.454159640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.454911 env[1221]: time="2025-07-10T00:29:35.454171560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.454911 env[1221]: time="2025-07-10T00:29:35.454183480Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 00:29:35.454911 env[1221]: time="2025-07-10T00:29:35.454207920Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 00:29:35.454911 env[1221]: time="2025-07-10T00:29:35.454221120Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 00:29:35.454911 env[1221]: time="2025-07-10T00:29:35.454238200Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 00:29:35.454911 env[1221]: time="2025-07-10T00:29:35.454271000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 00:29:35.455219 env[1221]: time="2025-07-10T00:29:35.454473080Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 00:29:35.455219 env[1221]: time="2025-07-10T00:29:35.454525560Z" level=info msg="Connect containerd service" Jul 10 00:29:35.455219 env[1221]: time="2025-07-10T00:29:35.454553360Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 00:29:35.455219 env[1221]: time="2025-07-10T00:29:35.455129680Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:29:35.457154 env[1221]: time="2025-07-10T00:29:35.455539240Z" level=info msg="Start subscribing containerd event" Jul 10 00:29:35.457154 env[1221]: time="2025-07-10T00:29:35.455584160Z" level=info msg="Start recovering state" Jul 10 00:29:35.457154 env[1221]: time="2025-07-10T00:29:35.455636200Z" level=info msg="Start event monitor" Jul 10 00:29:35.457154 env[1221]: time="2025-07-10T00:29:35.455654680Z" level=info msg="Start snapshots syncer" Jul 10 00:29:35.457154 env[1221]: time="2025-07-10T00:29:35.455663400Z" level=info msg="Start cni network conf syncer for default" Jul 10 00:29:35.457154 env[1221]: time="2025-07-10T00:29:35.455670120Z" level=info msg="Start streaming server" Jul 10 00:29:35.457154 env[1221]: time="2025-07-10T00:29:35.455806000Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 00:29:35.457154 env[1221]: time="2025-07-10T00:29:35.455847760Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 00:29:35.457154 env[1221]: time="2025-07-10T00:29:35.455908800Z" level=info msg="containerd successfully booted in 0.057097s" Jul 10 00:29:35.456001 systemd[1]: Started containerd.service. Jul 10 00:29:35.485885 locksmithd[1248]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 00:29:35.723444 tar[1219]: linux-arm64/LICENSE Jul 10 00:29:35.723603 tar[1219]: linux-arm64/README.md Jul 10 00:29:35.727464 systemd[1]: Finished prepare-helm.service. Jul 10 00:29:36.019558 systemd-networkd[1044]: eth0: Gained IPv6LL Jul 10 00:29:36.021204 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 00:29:36.022578 systemd[1]: Reached target network-online.target. Jul 10 00:29:36.025119 systemd[1]: Starting kubelet.service... Jul 10 00:29:36.710162 systemd[1]: Started kubelet.service. Jul 10 00:29:37.088690 sshd_keygen[1216]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 00:29:37.107139 systemd[1]: Finished sshd-keygen.service. Jul 10 00:29:37.109577 systemd[1]: Starting issuegen.service... Jul 10 00:29:37.114331 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 00:29:37.114485 systemd[1]: Finished issuegen.service. Jul 10 00:29:37.116588 systemd[1]: Starting systemd-user-sessions.service... Jul 10 00:29:37.122821 systemd[1]: Finished systemd-user-sessions.service. Jul 10 00:29:37.125267 systemd[1]: Started getty@tty1.service. Jul 10 00:29:37.127603 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 10 00:29:37.128805 systemd[1]: Reached target getty.target. Jul 10 00:29:37.129778 systemd[1]: Reached target multi-user.target. Jul 10 00:29:37.131953 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 00:29:37.139073 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 00:29:37.139244 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 00:29:37.140442 systemd[1]: Startup finished in 606ms (kernel) + 4.362s (initrd) + 5.207s (userspace) = 10.176s. Jul 10 00:29:37.225262 kubelet[1263]: E0710 00:29:37.225218 1263 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:29:37.227089 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:29:37.227210 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:29:40.400464 systemd[1]: Created slice system-sshd.slice. Jul 10 00:29:40.401563 systemd[1]: Started sshd@0-10.0.0.46:22-10.0.0.1:48712.service. Jul 10 00:29:40.448333 sshd[1286]: Accepted publickey for core from 10.0.0.1 port 48712 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:29:40.451843 sshd[1286]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:29:40.464554 systemd[1]: Created slice user-500.slice. Jul 10 00:29:40.465727 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 00:29:40.467382 systemd-logind[1210]: New session 1 of user core. Jul 10 00:29:40.474169 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 00:29:40.475690 systemd[1]: Starting user@500.service... Jul 10 00:29:40.478784 (systemd)[1289]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:29:40.542781 systemd[1289]: Queued start job for default target default.target. Jul 10 00:29:40.543278 systemd[1289]: Reached target paths.target. Jul 10 00:29:40.543311 systemd[1289]: Reached target sockets.target. Jul 10 00:29:40.543338 systemd[1289]: Reached target timers.target. Jul 10 00:29:40.543348 systemd[1289]: Reached target basic.target. Jul 10 00:29:40.543391 systemd[1289]: Reached target default.target. Jul 10 00:29:40.543415 systemd[1289]: Startup finished in 58ms. Jul 10 00:29:40.543632 systemd[1]: Started user@500.service. Jul 10 00:29:40.544622 systemd[1]: Started session-1.scope. Jul 10 00:29:40.596137 systemd[1]: Started sshd@1-10.0.0.46:22-10.0.0.1:48722.service. Jul 10 00:29:40.653084 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 48722 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:29:40.654293 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:29:40.657720 systemd-logind[1210]: New session 2 of user core. Jul 10 00:29:40.658882 systemd[1]: Started session-2.scope. Jul 10 00:29:40.713647 sshd[1298]: pam_unix(sshd:session): session closed for user core Jul 10 00:29:40.718371 systemd[1]: sshd@1-10.0.0.46:22-10.0.0.1:48722.service: Deactivated successfully. Jul 10 00:29:40.719007 systemd[1]: session-2.scope: Deactivated successfully. Jul 10 00:29:40.719595 systemd-logind[1210]: Session 2 logged out. Waiting for processes to exit. Jul 10 00:29:40.720771 systemd[1]: Started sshd@2-10.0.0.46:22-10.0.0.1:48734.service. Jul 10 00:29:40.721509 systemd-logind[1210]: Removed session 2. Jul 10 00:29:40.763369 sshd[1304]: Accepted publickey for core from 10.0.0.1 port 48734 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:29:40.764726 sshd[1304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:29:40.769413 systemd-logind[1210]: New session 3 of user core. Jul 10 00:29:40.771490 systemd[1]: Started session-3.scope. Jul 10 00:29:40.826132 sshd[1304]: pam_unix(sshd:session): session closed for user core Jul 10 00:29:40.831159 systemd[1]: sshd@2-10.0.0.46:22-10.0.0.1:48734.service: Deactivated successfully. Jul 10 00:29:40.831969 systemd[1]: session-3.scope: Deactivated successfully. Jul 10 00:29:40.832786 systemd-logind[1210]: Session 3 logged out. Waiting for processes to exit. Jul 10 00:29:40.834550 systemd[1]: Started sshd@3-10.0.0.46:22-10.0.0.1:48736.service. Jul 10 00:29:40.835846 systemd-logind[1210]: Removed session 3. Jul 10 00:29:40.876604 sshd[1310]: Accepted publickey for core from 10.0.0.1 port 48736 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:29:40.878161 sshd[1310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:29:40.882141 systemd-logind[1210]: New session 4 of user core. Jul 10 00:29:40.884395 systemd[1]: Started session-4.scope. Jul 10 00:29:40.945865 sshd[1310]: pam_unix(sshd:session): session closed for user core Jul 10 00:29:40.950810 systemd[1]: sshd@3-10.0.0.46:22-10.0.0.1:48736.service: Deactivated successfully. Jul 10 00:29:40.951981 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 00:29:40.952939 systemd-logind[1210]: Session 4 logged out. Waiting for processes to exit. Jul 10 00:29:40.955514 systemd[1]: Started sshd@4-10.0.0.46:22-10.0.0.1:48750.service. Jul 10 00:29:40.956978 systemd-logind[1210]: Removed session 4. Jul 10 00:29:41.003037 sshd[1316]: Accepted publickey for core from 10.0.0.1 port 48750 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:29:41.004498 sshd[1316]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:29:41.009235 systemd-logind[1210]: New session 5 of user core. Jul 10 00:29:41.011636 systemd[1]: Started session-5.scope. Jul 10 00:29:41.078416 sudo[1319]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 00:29:41.078636 sudo[1319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:29:41.092479 dbus-daemon[1195]: avc: received setenforce notice (enforcing=1) Jul 10 00:29:41.093421 sudo[1319]: pam_unix(sudo:session): session closed for user root Jul 10 00:29:41.095717 sshd[1316]: pam_unix(sshd:session): session closed for user core Jul 10 00:29:41.099741 systemd[1]: Started sshd@5-10.0.0.46:22-10.0.0.1:48762.service. Jul 10 00:29:41.100265 systemd[1]: sshd@4-10.0.0.46:22-10.0.0.1:48750.service: Deactivated successfully. Jul 10 00:29:41.100886 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 00:29:41.101545 systemd-logind[1210]: Session 5 logged out. Waiting for processes to exit. Jul 10 00:29:41.102527 systemd-logind[1210]: Removed session 5. Jul 10 00:29:41.142460 sshd[1322]: Accepted publickey for core from 10.0.0.1 port 48762 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:29:41.144169 sshd[1322]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:29:41.147856 systemd-logind[1210]: New session 6 of user core. Jul 10 00:29:41.148261 systemd[1]: Started session-6.scope. Jul 10 00:29:41.201159 sudo[1327]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 00:29:41.202212 sudo[1327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:29:41.204903 sudo[1327]: pam_unix(sudo:session): session closed for user root Jul 10 00:29:41.209205 sudo[1326]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 00:29:41.209464 sudo[1326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:29:41.217899 systemd[1]: Stopping audit-rules.service... Jul 10 00:29:41.217000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:29:41.219228 auditctl[1330]: No rules Jul 10 00:29:41.219642 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 00:29:41.219726 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 10 00:29:41.219757 kernel: audit: type=1305 audit(1752107381.217:214): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:29:41.219808 systemd[1]: Stopped audit-rules.service. Jul 10 00:29:41.221211 systemd[1]: Starting audit-rules.service... Jul 10 00:29:41.217000 audit[1330]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc5866580 a2=420 a3=0 items=0 ppid=1 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.225125 kernel: audit: type=1300 audit(1752107381.217:214): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc5866580 a2=420 a3=0 items=0 ppid=1 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.225197 kernel: audit: type=1327 audit(1752107381.217:214): proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:29:41.217000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:29:41.228056 kernel: audit: type=1131 audit(1752107381.218:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.218000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.238372 augenrules[1347]: No rules Jul 10 00:29:41.239290 systemd[1]: Finished audit-rules.service. Jul 10 00:29:41.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.240137 sudo[1326]: pam_unix(sudo:session): session closed for user root Jul 10 00:29:41.238000 audit[1326]: USER_END pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.243459 sshd[1322]: pam_unix(sshd:session): session closed for user core Jul 10 00:29:41.246014 systemd[1]: sshd@5-10.0.0.46:22-10.0.0.1:48762.service: Deactivated successfully. Jul 10 00:29:41.246475 kernel: audit: type=1130 audit(1752107381.238:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.246519 kernel: audit: type=1106 audit(1752107381.238:217): pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.246536 kernel: audit: type=1104 audit(1752107381.238:218): pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.238000 audit[1326]: CRED_DISP pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.246646 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 00:29:41.247227 systemd-logind[1210]: Session 6 logged out. Waiting for processes to exit. Jul 10 00:29:41.248403 systemd[1]: Started sshd@6-10.0.0.46:22-10.0.0.1:48770.service. Jul 10 00:29:41.249493 kernel: audit: type=1106 audit(1752107381.242:219): pid=1322 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:29:41.242000 audit[1322]: USER_END pid=1322 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:29:41.249129 systemd-logind[1210]: Removed session 6. Jul 10 00:29:41.242000 audit[1322]: CRED_DISP pid=1322 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:29:41.257401 kernel: audit: type=1104 audit(1752107381.242:220): pid=1322 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:29:41.257469 kernel: audit: type=1131 audit(1752107381.244:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.46:22-10.0.0.1:48762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.244000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.46:22-10.0.0.1:48762 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.247000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.46:22-10.0.0.1:48770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.293022 sshd[1353]: Accepted publickey for core from 10.0.0.1 port 48770 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:29:41.291000 audit[1353]: USER_ACCT pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:29:41.293000 audit[1353]: CRED_ACQ pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:29:41.293000 audit[1353]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe82332f0 a2=3 a3=1 items=0 ppid=1 pid=1353 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.293000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:29:41.294820 sshd[1353]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:29:41.301459 systemd-logind[1210]: New session 7 of user core. Jul 10 00:29:41.302305 systemd[1]: Started session-7.scope. Jul 10 00:29:41.305000 audit[1353]: USER_START pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:29:41.307000 audit[1355]: CRED_ACQ pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:29:41.356000 audit[1356]: USER_ACCT pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.356000 audit[1356]: CRED_REFR pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.356714 sudo[1356]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 00:29:41.356923 sudo[1356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:29:41.358000 audit[1356]: USER_START pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.426037 systemd[1]: Starting docker.service... Jul 10 00:29:41.506762 env[1368]: time="2025-07-10T00:29:41.506647969Z" level=info msg="Starting up" Jul 10 00:29:41.509522 env[1368]: time="2025-07-10T00:29:41.509488218Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:29:41.509522 env[1368]: time="2025-07-10T00:29:41.509513483Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:29:41.509617 env[1368]: time="2025-07-10T00:29:41.509535455Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:29:41.509617 env[1368]: time="2025-07-10T00:29:41.509546059Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:29:41.511723 env[1368]: time="2025-07-10T00:29:41.511398145Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:29:41.511723 env[1368]: time="2025-07-10T00:29:41.511419515Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:29:41.511723 env[1368]: time="2025-07-10T00:29:41.511433814Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:29:41.511723 env[1368]: time="2025-07-10T00:29:41.511443816Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:29:41.698815 env[1368]: time="2025-07-10T00:29:41.698728473Z" level=info msg="Loading containers: start." Jul 10 00:29:41.745000 audit[1402]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.745000 audit[1402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe6927a50 a2=0 a3=1 items=0 ppid=1368 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.745000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 00:29:41.747000 audit[1404]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.747000 audit[1404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffca6a7810 a2=0 a3=1 items=0 ppid=1368 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.747000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 00:29:41.748000 audit[1406]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.748000 audit[1406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffed3a3330 a2=0 a3=1 items=0 ppid=1368 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.748000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:29:41.750000 audit[1408]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.750000 audit[1408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffdce22220 a2=0 a3=1 items=0 ppid=1368 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.750000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:29:41.752000 audit[1410]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.752000 audit[1410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffefdda280 a2=0 a3=1 items=0 ppid=1368 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.752000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 00:29:41.784000 audit[1415]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.784000 audit[1415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe88bc720 a2=0 a3=1 items=0 ppid=1368 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.784000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 00:29:41.790000 audit[1417]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.790000 audit[1417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffd6af7420 a2=0 a3=1 items=0 ppid=1368 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.790000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 00:29:41.792000 audit[1419]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.792000 audit[1419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=fffff8fb04d0 a2=0 a3=1 items=0 ppid=1368 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.792000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 00:29:41.794000 audit[1421]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.794000 audit[1421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffc9fd35a0 a2=0 a3=1 items=0 ppid=1368 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.794000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:29:41.800000 audit[1425]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.800000 audit[1425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd524c0e0 a2=0 a3=1 items=0 ppid=1368 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.800000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:29:41.821000 audit[1426]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.821000 audit[1426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=fffff85a48b0 a2=0 a3=1 items=0 ppid=1368 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.821000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:29:41.830350 kernel: Initializing XFRM netlink socket Jul 10 00:29:41.856183 env[1368]: time="2025-07-10T00:29:41.856122034Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 00:29:41.871000 audit[1434]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.871000 audit[1434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffe2433b10 a2=0 a3=1 items=0 ppid=1368 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.871000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 00:29:41.890000 audit[1437]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.890000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffd8780140 a2=0 a3=1 items=0 ppid=1368 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.890000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 00:29:41.893000 audit[1440]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.893000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffde3ecb80 a2=0 a3=1 items=0 ppid=1368 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.893000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 00:29:41.895000 audit[1442]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.895000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc73f3040 a2=0 a3=1 items=0 ppid=1368 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.895000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 00:29:41.897000 audit[1444]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.897000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd7cce1a0 a2=0 a3=1 items=0 ppid=1368 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.897000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 00:29:41.899000 audit[1446]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.899000 audit[1446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=fffffab26280 a2=0 a3=1 items=0 ppid=1368 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.899000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 00:29:41.901000 audit[1448]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.901000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffd1a69aa0 a2=0 a3=1 items=0 ppid=1368 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.901000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 00:29:41.912000 audit[1451]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.912000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=fffff417c000 a2=0 a3=1 items=0 ppid=1368 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.912000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 00:29:41.914000 audit[1453]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.914000 audit[1453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe8ad23d0 a2=0 a3=1 items=0 ppid=1368 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.914000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:29:41.916000 audit[1455]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.916000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffcd3d1760 a2=0 a3=1 items=0 ppid=1368 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.916000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:29:41.918000 audit[1457]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.918000 audit[1457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff5f8a910 a2=0 a3=1 items=0 ppid=1368 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.918000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 00:29:41.919939 systemd-networkd[1044]: docker0: Link UP Jul 10 00:29:41.926000 audit[1461]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.926000 audit[1461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffee1225e0 a2=0 a3=1 items=0 ppid=1368 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.926000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:29:41.940000 audit[1462]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1462 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:41.940000 audit[1462]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe2b78bf0 a2=0 a3=1 items=0 ppid=1368 pid=1462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:41.940000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:29:41.942079 env[1368]: time="2025-07-10T00:29:41.942025076Z" level=info msg="Loading containers: done." Jul 10 00:29:41.965169 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck60046293-merged.mount: Deactivated successfully. Jul 10 00:29:41.970653 env[1368]: time="2025-07-10T00:29:41.970598878Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 00:29:41.970828 env[1368]: time="2025-07-10T00:29:41.970800117Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 00:29:41.970941 env[1368]: time="2025-07-10T00:29:41.970918853Z" level=info msg="Daemon has completed initialization" Jul 10 00:29:41.983573 systemd[1]: Started docker.service. Jul 10 00:29:41.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:41.987562 env[1368]: time="2025-07-10T00:29:41.987505889Z" level=info msg="API listen on /run/docker.sock" Jul 10 00:29:42.694061 env[1221]: time="2025-07-10T00:29:42.694002820Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 10 00:29:43.218242 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3302560086.mount: Deactivated successfully. Jul 10 00:29:44.434828 env[1221]: time="2025-07-10T00:29:44.434762290Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:44.441723 env[1221]: time="2025-07-10T00:29:44.441676360Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8907c2d36348551c1038e24ef688f6830681069380376707e55518007a20a86c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:44.444746 env[1221]: time="2025-07-10T00:29:44.444701987Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:44.446932 env[1221]: time="2025-07-10T00:29:44.446894122Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:44.447686 env[1221]: time="2025-07-10T00:29:44.447639247Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:8907c2d36348551c1038e24ef688f6830681069380376707e55518007a20a86c\"" Jul 10 00:29:44.452955 env[1221]: time="2025-07-10T00:29:44.452914892Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 10 00:29:45.881707 env[1221]: time="2025-07-10T00:29:45.881660763Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:45.883854 env[1221]: time="2025-07-10T00:29:45.883824824Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f640d6889416d515a0ac4de1c26f4d80134c47641ff464abc831560a951175f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:45.885997 env[1221]: time="2025-07-10T00:29:45.885967312Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:45.888329 env[1221]: time="2025-07-10T00:29:45.888289922Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:45.889228 env[1221]: time="2025-07-10T00:29:45.889181185Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:0f640d6889416d515a0ac4de1c26f4d80134c47641ff464abc831560a951175f\"" Jul 10 00:29:45.889883 env[1221]: time="2025-07-10T00:29:45.889859807Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 10 00:29:47.137754 env[1221]: time="2025-07-10T00:29:47.137698810Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:47.139082 env[1221]: time="2025-07-10T00:29:47.139050828Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:23d79b83d912e2633bcb4f9f7b8b46024893e11d492a4249d8f1f8c9a26b7b2c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:47.140802 env[1221]: time="2025-07-10T00:29:47.140764203Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:47.143181 env[1221]: time="2025-07-10T00:29:47.143146594Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:47.143962 env[1221]: time="2025-07-10T00:29:47.143930625Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:23d79b83d912e2633bcb4f9f7b8b46024893e11d492a4249d8f1f8c9a26b7b2c\"" Jul 10 00:29:47.144497 env[1221]: time="2025-07-10T00:29:47.144465188Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 10 00:29:47.478069 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 00:29:47.479524 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 10 00:29:47.479567 kernel: audit: type=1130 audit(1752107387.476:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:47.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:47.478253 systemd[1]: Stopped kubelet.service. Jul 10 00:29:47.479671 systemd[1]: Starting kubelet.service... Jul 10 00:29:47.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:47.484028 kernel: audit: type=1131 audit(1752107387.476:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:47.579000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:47.579871 systemd[1]: Started kubelet.service. Jul 10 00:29:47.583353 kernel: audit: type=1130 audit(1752107387.579:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:47.637714 kubelet[1503]: E0710 00:29:47.637662 1503 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:29:47.640222 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:29:47.640374 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:29:47.640000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:29:47.643335 kernel: audit: type=1131 audit(1752107387.640:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:29:48.306289 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3098198268.mount: Deactivated successfully. Jul 10 00:29:48.886163 env[1221]: time="2025-07-10T00:29:48.886114209Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:48.887593 env[1221]: time="2025-07-10T00:29:48.887557098Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dde5ff0da443b455e81aefc7bf6a216fdd659d1cbe13b8e8ac8129c3ecd27f89,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:48.888737 env[1221]: time="2025-07-10T00:29:48.888712236Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:48.890289 env[1221]: time="2025-07-10T00:29:48.890253968Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:48.890894 env[1221]: time="2025-07-10T00:29:48.890868978Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:dde5ff0da443b455e81aefc7bf6a216fdd659d1cbe13b8e8ac8129c3ecd27f89\"" Jul 10 00:29:48.891398 env[1221]: time="2025-07-10T00:29:48.891375129Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 10 00:29:49.711781 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3918637308.mount: Deactivated successfully. Jul 10 00:29:50.643954 env[1221]: time="2025-07-10T00:29:50.643890623Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:50.645256 env[1221]: time="2025-07-10T00:29:50.645224381Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:50.647552 env[1221]: time="2025-07-10T00:29:50.647517305Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:50.649595 env[1221]: time="2025-07-10T00:29:50.649553787Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:50.650287 env[1221]: time="2025-07-10T00:29:50.650235444Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 10 00:29:50.650925 env[1221]: time="2025-07-10T00:29:50.650891189Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 00:29:51.123288 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2952670626.mount: Deactivated successfully. Jul 10 00:29:51.132236 env[1221]: time="2025-07-10T00:29:51.132190586Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:51.134259 env[1221]: time="2025-07-10T00:29:51.134221982Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:51.135576 env[1221]: time="2025-07-10T00:29:51.135551085Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:51.137307 env[1221]: time="2025-07-10T00:29:51.137268536Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:51.138009 env[1221]: time="2025-07-10T00:29:51.137979558Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 10 00:29:51.138733 env[1221]: time="2025-07-10T00:29:51.138708761Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 10 00:29:51.673808 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1161969113.mount: Deactivated successfully. Jul 10 00:29:53.628403 env[1221]: time="2025-07-10T00:29:53.628342907Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:53.633070 env[1221]: time="2025-07-10T00:29:53.633015286Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:53.634994 env[1221]: time="2025-07-10T00:29:53.634966571Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:53.637181 env[1221]: time="2025-07-10T00:29:53.637142326Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:29:53.637939 env[1221]: time="2025-07-10T00:29:53.637916138Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Jul 10 00:29:57.031000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:57.031577 systemd[1]: Stopped kubelet.service. Jul 10 00:29:57.033551 systemd[1]: Starting kubelet.service... Jul 10 00:29:57.031000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:57.036607 kernel: audit: type=1130 audit(1752107397.031:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:57.036682 kernel: audit: type=1131 audit(1752107397.031:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:57.057345 systemd[1]: Reloading. Jul 10 00:29:57.108166 /usr/lib/systemd/system-generators/torcx-generator[1560]: time="2025-07-10T00:29:57Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:29:57.108199 /usr/lib/systemd/system-generators/torcx-generator[1560]: time="2025-07-10T00:29:57Z" level=info msg="torcx already run" Jul 10 00:29:57.201508 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:29:57.201526 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:29:57.216657 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:29:57.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270391 kernel: audit: type=1400 audit(1752107397.265:262): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270440 kernel: audit: type=1400 audit(1752107397.265:263): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270462 kernel: audit: type=1400 audit(1752107397.265:264): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274881 kernel: audit: type=1400 audit(1752107397.265:265): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274920 kernel: audit: type=1400 audit(1752107397.265:266): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.279481 kernel: audit: type=1400 audit(1752107397.265:267): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.279510 kernel: audit: type=1400 audit(1752107397.265:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.281711 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 00:29:57.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.267000 audit: BPF prog-id=46 op=LOAD Jul 10 00:29:57.267000 audit: BPF prog-id=41 op=UNLOAD Jul 10 00:29:57.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.267000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.267000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270000 audit: BPF prog-id=47 op=LOAD Jul 10 00:29:57.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.270000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.272000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.272000 audit: BPF prog-id=48 op=LOAD Jul 10 00:29:57.272000 audit: BPF prog-id=42 op=UNLOAD Jul 10 00:29:57.272000 audit: BPF prog-id=43 op=UNLOAD Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit: BPF prog-id=49 op=LOAD Jul 10 00:29:57.274000 audit: BPF prog-id=30 op=UNLOAD Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.276000 audit: BPF prog-id=50 op=LOAD Jul 10 00:29:57.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.279000 audit: BPF prog-id=51 op=LOAD Jul 10 00:29:57.279000 audit: BPF prog-id=31 op=UNLOAD Jul 10 00:29:57.279000 audit: BPF prog-id=32 op=UNLOAD Jul 10 00:29:57.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit: BPF prog-id=52 op=LOAD Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.282000 audit: BPF prog-id=53 op=LOAD Jul 10 00:29:57.282000 audit: BPF prog-id=33 op=UNLOAD Jul 10 00:29:57.282000 audit: BPF prog-id=34 op=UNLOAD Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit: BPF prog-id=54 op=LOAD Jul 10 00:29:57.283000 audit: BPF prog-id=44 op=UNLOAD Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit: BPF prog-id=55 op=LOAD Jul 10 00:29:57.283000 audit: BPF prog-id=35 op=UNLOAD Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit: BPF prog-id=56 op=LOAD Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.283000 audit: BPF prog-id=57 op=LOAD Jul 10 00:29:57.283000 audit: BPF prog-id=36 op=UNLOAD Jul 10 00:29:57.283000 audit: BPF prog-id=37 op=UNLOAD Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit: BPF prog-id=58 op=LOAD Jul 10 00:29:57.284000 audit: BPF prog-id=39 op=UNLOAD Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.284000 audit: BPF prog-id=59 op=LOAD Jul 10 00:29:57.284000 audit: BPF prog-id=38 op=UNLOAD Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:57.285000 audit: BPF prog-id=60 op=LOAD Jul 10 00:29:57.285000 audit: BPF prog-id=40 op=UNLOAD Jul 10 00:29:57.296130 systemd[1]: Started kubelet.service. Jul 10 00:29:57.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:57.298675 systemd[1]: Stopping kubelet.service... Jul 10 00:29:57.299234 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:29:57.299443 systemd[1]: Stopped kubelet.service. Jul 10 00:29:57.299000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:57.301353 systemd[1]: Starting kubelet.service... Jul 10 00:29:57.395764 systemd[1]: Started kubelet.service. Jul 10 00:29:57.395000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:29:57.432182 kubelet[1605]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:29:57.432182 kubelet[1605]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 10 00:29:57.432182 kubelet[1605]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:29:57.432565 kubelet[1605]: I0710 00:29:57.432228 1605 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:29:58.681309 kubelet[1605]: I0710 00:29:58.681261 1605 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 10 00:29:58.681309 kubelet[1605]: I0710 00:29:58.681297 1605 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:29:58.681663 kubelet[1605]: I0710 00:29:58.681544 1605 server.go:934] "Client rotation is on, will bootstrap in background" Jul 10 00:29:58.722159 kubelet[1605]: E0710 00:29:58.722107 1605 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.46:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.46:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:29:58.725726 kubelet[1605]: I0710 00:29:58.725689 1605 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:29:58.731924 kubelet[1605]: E0710 00:29:58.731888 1605 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:29:58.731924 kubelet[1605]: I0710 00:29:58.731923 1605 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:29:58.735757 kubelet[1605]: I0710 00:29:58.735726 1605 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:29:58.736644 kubelet[1605]: I0710 00:29:58.736614 1605 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 10 00:29:58.736803 kubelet[1605]: I0710 00:29:58.736763 1605 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:29:58.737189 kubelet[1605]: I0710 00:29:58.736801 1605 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:29:58.737293 kubelet[1605]: I0710 00:29:58.737251 1605 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:29:58.737293 kubelet[1605]: I0710 00:29:58.737263 1605 container_manager_linux.go:300] "Creating device plugin manager" Jul 10 00:29:58.737538 kubelet[1605]: I0710 00:29:58.737515 1605 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:29:58.740939 kubelet[1605]: I0710 00:29:58.740906 1605 kubelet.go:408] "Attempting to sync node with API server" Jul 10 00:29:58.740990 kubelet[1605]: I0710 00:29:58.740946 1605 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:29:58.740990 kubelet[1605]: I0710 00:29:58.740973 1605 kubelet.go:314] "Adding apiserver pod source" Jul 10 00:29:58.741066 kubelet[1605]: I0710 00:29:58.741052 1605 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:29:58.741360 kubelet[1605]: W0710 00:29:58.741225 1605 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.46:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.46:6443: connect: connection refused Jul 10 00:29:58.741478 kubelet[1605]: E0710 00:29:58.741458 1605 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.46:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.46:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:29:58.749599 kubelet[1605]: I0710 00:29:58.749574 1605 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:29:58.750496 kubelet[1605]: I0710 00:29:58.750477 1605 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:29:58.750692 kubelet[1605]: W0710 00:29:58.750679 1605 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 00:29:58.751712 kubelet[1605]: I0710 00:29:58.751691 1605 server.go:1274] "Started kubelet" Jul 10 00:29:58.752042 kubelet[1605]: I0710 00:29:58.751999 1605 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:29:58.752484 kubelet[1605]: I0710 00:29:58.752439 1605 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:29:58.752818 kubelet[1605]: I0710 00:29:58.752798 1605 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:29:58.753285 kubelet[1605]: W0710 00:29:58.753052 1605 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.46:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.46:6443: connect: connection refused Jul 10 00:29:58.753285 kubelet[1605]: E0710 00:29:58.753135 1605 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.46:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.46:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:29:58.753446 kubelet[1605]: I0710 00:29:58.753341 1605 server.go:449] "Adding debug handlers to kubelet server" Jul 10 00:29:58.753000 audit[1605]: AVC avc: denied { mac_admin } for pid=1605 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:58.753000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:29:58.753000 audit[1605]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008cfec0 a1=400086cb10 a2=40008cfe90 a3=25 items=0 ppid=1 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.753000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:29:58.753000 audit[1605]: AVC avc: denied { mac_admin } for pid=1605 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:58.753000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:29:58.753000 audit[1605]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400091a460 a1=400086cb28 a2=40008cff50 a3=25 items=0 ppid=1 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.753000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:29:58.755590 kubelet[1605]: I0710 00:29:58.755196 1605 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:29:58.755590 kubelet[1605]: I0710 00:29:58.755236 1605 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 10 00:29:58.755590 kubelet[1605]: I0710 00:29:58.755298 1605 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:29:58.755590 kubelet[1605]: I0710 00:29:58.755494 1605 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:29:58.757260 kubelet[1605]: E0710 00:29:58.757226 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:29:58.757260 kubelet[1605]: I0710 00:29:58.757260 1605 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 10 00:29:58.757494 kubelet[1605]: I0710 00:29:58.757468 1605 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 10 00:29:58.757545 kubelet[1605]: I0710 00:29:58.757533 1605 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:29:58.757996 kubelet[1605]: W0710 00:29:58.757957 1605 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.46:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.46:6443: connect: connection refused Jul 10 00:29:58.758028 kubelet[1605]: E0710 00:29:58.758002 1605 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.46:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.46:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:29:58.758402 kubelet[1605]: E0710 00:29:58.758357 1605 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.46:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.46:6443: connect: connection refused" interval="200ms" Jul 10 00:29:58.759048 kubelet[1605]: E0710 00:29:58.759010 1605 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:29:58.759426 kubelet[1605]: I0710 00:29:58.759405 1605 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:29:58.759652 kubelet[1605]: I0710 00:29:58.759502 1605 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:29:58.762766 kubelet[1605]: I0710 00:29:58.762740 1605 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:29:58.761000 audit[1619]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1619 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:58.761000 audit[1619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcf07cde0 a2=0 a3=1 items=0 ppid=1605 pid=1619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.761000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:29:58.762000 audit[1620]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1620 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:58.762000 audit[1620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc707f1e0 a2=0 a3=1 items=0 ppid=1605 pid=1620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.762000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:29:58.765077 kubelet[1605]: E0710 00:29:58.760626 1605 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.46:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.46:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850bc6566ed4a32 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 00:29:58.751668786 +0000 UTC m=+1.352298696,LastTimestamp:2025-07-10 00:29:58.751668786 +0000 UTC m=+1.352298696,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 00:29:58.765000 audit[1622]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:58.765000 audit[1622]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffeb26d4a0 a2=0 a3=1 items=0 ppid=1605 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.765000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:29:58.767000 audit[1624]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:58.767000 audit[1624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc5d34920 a2=0 a3=1 items=0 ppid=1605 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:29:58.773777 kubelet[1605]: I0710 00:29:58.773752 1605 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 10 00:29:58.773777 kubelet[1605]: I0710 00:29:58.773769 1605 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 10 00:29:58.773889 kubelet[1605]: I0710 00:29:58.773787 1605 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:29:58.780000 audit[1630]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1630 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:58.780000 audit[1630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff760ec80 a2=0 a3=1 items=0 ppid=1605 pid=1630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.780000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 00:29:58.782129 kubelet[1605]: I0710 00:29:58.782000 1605 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:29:58.781000 audit[1633]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1633 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:58.781000 audit[1633]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe2f5e560 a2=0 a3=1 items=0 ppid=1605 pid=1633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.781000 audit[1632]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:29:58.781000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffadce320 a2=0 a3=1 items=0 ppid=1605 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.781000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:29:58.781000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:29:58.783239 kubelet[1605]: I0710 00:29:58.783204 1605 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:29:58.783239 kubelet[1605]: I0710 00:29:58.783229 1605 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 10 00:29:58.783294 kubelet[1605]: I0710 00:29:58.783260 1605 kubelet.go:2321] "Starting kubelet main sync loop" Jul 10 00:29:58.783341 kubelet[1605]: E0710 00:29:58.783301 1605 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:29:58.784521 kubelet[1605]: W0710 00:29:58.784418 1605 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.46:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.46:6443: connect: connection refused Jul 10 00:29:58.784585 kubelet[1605]: E0710 00:29:58.784531 1605 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.46:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.46:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:29:58.783000 audit[1635]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1635 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:29:58.783000 audit[1636]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:58.783000 audit[1635]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffff60e9c0 a2=0 a3=1 items=0 ppid=1605 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.783000 audit[1636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffecd83c50 a2=0 a3=1 items=0 ppid=1605 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.783000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:29:58.783000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:29:58.785000 audit[1638]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:29:58.785000 audit[1638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd18fbad0 a2=0 a3=1 items=0 ppid=1605 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.785000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:29:58.787000 audit[1639]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:29:58.787000 audit[1639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffe9415ce0 a2=0 a3=1 items=0 ppid=1605 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.787000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:29:58.788000 audit[1640]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:29:58.788000 audit[1640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffcf3dbb50 a2=0 a3=1 items=0 ppid=1605 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.788000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:29:58.856961 kubelet[1605]: I0710 00:29:58.856923 1605 policy_none.go:49] "None policy: Start" Jul 10 00:29:58.857299 kubelet[1605]: E0710 00:29:58.857283 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:29:58.857804 kubelet[1605]: I0710 00:29:58.857787 1605 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 10 00:29:58.857861 kubelet[1605]: I0710 00:29:58.857818 1605 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:29:58.881965 systemd[1]: Created slice kubepods.slice. Jul 10 00:29:58.883581 kubelet[1605]: E0710 00:29:58.883552 1605 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 10 00:29:58.885810 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 00:29:58.888079 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 00:29:58.905010 kubelet[1605]: I0710 00:29:58.904976 1605 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:29:58.904000 audit[1605]: AVC avc: denied { mac_admin } for pid=1605 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:29:58.904000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:29:58.904000 audit[1605]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009707e0 a1=4000d57848 a2=40009707b0 a3=25 items=0 ppid=1 pid=1605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:29:58.904000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:29:58.905817 kubelet[1605]: I0710 00:29:58.905057 1605 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:29:58.905817 kubelet[1605]: I0710 00:29:58.905391 1605 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:29:58.905817 kubelet[1605]: I0710 00:29:58.905404 1605 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:29:58.905817 kubelet[1605]: I0710 00:29:58.905639 1605 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:29:58.906858 kubelet[1605]: E0710 00:29:58.906818 1605 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 00:29:58.959519 kubelet[1605]: E0710 00:29:58.959407 1605 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.46:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.46:6443: connect: connection refused" interval="400ms" Jul 10 00:29:59.007494 kubelet[1605]: I0710 00:29:59.007459 1605 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:29:59.007993 kubelet[1605]: E0710 00:29:59.007957 1605 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.46:6443/api/v1/nodes\": dial tcp 10.0.0.46:6443: connect: connection refused" node="localhost" Jul 10 00:29:59.091964 systemd[1]: Created slice kubepods-burstable-pod811f935311317e47b1311b36ef95498c.slice. Jul 10 00:29:59.109836 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 10 00:29:59.120612 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 10 00:29:59.158476 kubelet[1605]: I0710 00:29:59.158432 1605 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:29:59.158476 kubelet[1605]: I0710 00:29:59.158468 1605 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/811f935311317e47b1311b36ef95498c-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"811f935311317e47b1311b36ef95498c\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:29:59.158612 kubelet[1605]: I0710 00:29:59.158489 1605 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/811f935311317e47b1311b36ef95498c-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"811f935311317e47b1311b36ef95498c\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:29:59.158612 kubelet[1605]: I0710 00:29:59.158507 1605 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:29:59.158612 kubelet[1605]: I0710 00:29:59.158525 1605 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:29:59.158612 kubelet[1605]: I0710 00:29:59.158557 1605 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/811f935311317e47b1311b36ef95498c-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"811f935311317e47b1311b36ef95498c\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:29:59.158612 kubelet[1605]: I0710 00:29:59.158573 1605 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:29:59.158734 kubelet[1605]: I0710 00:29:59.158595 1605 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:29:59.158734 kubelet[1605]: I0710 00:29:59.158631 1605 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:29:59.209457 kubelet[1605]: I0710 00:29:59.209420 1605 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:29:59.209827 kubelet[1605]: E0710 00:29:59.209762 1605 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.46:6443/api/v1/nodes\": dial tcp 10.0.0.46:6443: connect: connection refused" node="localhost" Jul 10 00:29:59.360389 kubelet[1605]: E0710 00:29:59.360300 1605 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.46:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.46:6443: connect: connection refused" interval="800ms" Jul 10 00:29:59.408541 kubelet[1605]: E0710 00:29:59.408504 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:29:59.409151 env[1221]: time="2025-07-10T00:29:59.409105454Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:811f935311317e47b1311b36ef95498c,Namespace:kube-system,Attempt:0,}" Jul 10 00:29:59.412673 kubelet[1605]: E0710 00:29:59.412644 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:29:59.413127 env[1221]: time="2025-07-10T00:29:59.413007491Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 10 00:29:59.422648 kubelet[1605]: E0710 00:29:59.422613 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:29:59.423097 env[1221]: time="2025-07-10T00:29:59.423063778Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 10 00:29:59.611337 kubelet[1605]: I0710 00:29:59.611207 1605 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:29:59.611745 kubelet[1605]: E0710 00:29:59.611716 1605 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.46:6443/api/v1/nodes\": dial tcp 10.0.0.46:6443: connect: connection refused" node="localhost" Jul 10 00:29:59.686698 kubelet[1605]: W0710 00:29:59.686631 1605 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.46:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.46:6443: connect: connection refused Jul 10 00:29:59.686698 kubelet[1605]: E0710 00:29:59.686700 1605 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.46:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.46:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:29:59.889788 kubelet[1605]: W0710 00:29:59.889652 1605 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.46:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.46:6443: connect: connection refused Jul 10 00:29:59.889788 kubelet[1605]: E0710 00:29:59.889725 1605 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.46:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.46:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:30:00.030905 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount558183681.mount: Deactivated successfully. Jul 10 00:30:00.038634 env[1221]: time="2025-07-10T00:30:00.038567036Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.039879 env[1221]: time="2025-07-10T00:30:00.039848941Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.041156 env[1221]: time="2025-07-10T00:30:00.041128445Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.042631 env[1221]: time="2025-07-10T00:30:00.042598932Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.044035 env[1221]: time="2025-07-10T00:30:00.044007678Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.044798 env[1221]: time="2025-07-10T00:30:00.044774092Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.047221 env[1221]: time="2025-07-10T00:30:00.047190132Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.050745 env[1221]: time="2025-07-10T00:30:00.050700255Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.054076 env[1221]: time="2025-07-10T00:30:00.054029358Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.054887 env[1221]: time="2025-07-10T00:30:00.054846669Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.055844 env[1221]: time="2025-07-10T00:30:00.055805146Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.056703 env[1221]: time="2025-07-10T00:30:00.056679356Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:00.082946 env[1221]: time="2025-07-10T00:30:00.082866790Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:00.082946 env[1221]: time="2025-07-10T00:30:00.082883595Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:00.082946 env[1221]: time="2025-07-10T00:30:00.082933652Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:00.083144 env[1221]: time="2025-07-10T00:30:00.082944135Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:00.083144 env[1221]: time="2025-07-10T00:30:00.082966103Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:00.083144 env[1221]: time="2025-07-10T00:30:00.083013759Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:00.083222 env[1221]: time="2025-07-10T00:30:00.083179734Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5de312bbcb6aec221d2092e1fd409911f3bce39f6ca7d73beac7464a2dc21606 pid=1665 runtime=io.containerd.runc.v2 Jul 10 00:30:00.083938 env[1221]: time="2025-07-10T00:30:00.083863920Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:00.083938 env[1221]: time="2025-07-10T00:30:00.083914977Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:00.083938 env[1221]: time="2025-07-10T00:30:00.083925260Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:00.084165 env[1221]: time="2025-07-10T00:30:00.084121766Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7bf101e332fc325070a1754f1563b67a8ed0de8ffccf089376b2181c808432aa pid=1663 runtime=io.containerd.runc.v2 Jul 10 00:30:00.084426 env[1221]: time="2025-07-10T00:30:00.084385053Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c9141a0029ac2e02db29671c9c63fa9436960c8a1083f52e8f1248ad14e398e6 pid=1662 runtime=io.containerd.runc.v2 Jul 10 00:30:00.094980 systemd[1]: Started cri-containerd-5de312bbcb6aec221d2092e1fd409911f3bce39f6ca7d73beac7464a2dc21606.scope. Jul 10 00:30:00.109517 systemd[1]: Started cri-containerd-7bf101e332fc325070a1754f1563b67a8ed0de8ffccf089376b2181c808432aa.scope. Jul 10 00:30:00.112374 systemd[1]: Started cri-containerd-c9141a0029ac2e02db29671c9c63fa9436960c8a1083f52e8f1248ad14e398e6.scope. Jul 10 00:30:00.149587 kubelet[1605]: W0710 00:30:00.149471 1605 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.46:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.46:6443: connect: connection refused Jul 10 00:30:00.149587 kubelet[1605]: E0710 00:30:00.149541 1605 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.46:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.46:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.149000 audit: BPF prog-id=61 op=LOAD Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1663 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762663130316533333266633332353037306131373534663135363362 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1663 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762663130316533333266633332353037306131373534663135363362 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit: BPF prog-id=62 op=LOAD Jul 10 00:30:00.150000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1663 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit: BPF prog-id=63 op=LOAD Jul 10 00:30:00.152000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400019bb38 a2=10 a3=0 items=0 ppid=1662 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339313431613030323961633265303264623239363731633963363366 Jul 10 00:30:00.152000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.152000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400019b5a0 a2=3c a3=0 items=0 ppid=1662 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.152000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339313431613030323961633265303264623239363731633963363366 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit: BPF prog-id=64 op=LOAD Jul 10 00:30:00.153000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019b8e0 a2=78 a3=0 items=0 ppid=1662 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339313431613030323961633265303264623239363731633963363366 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.153000 audit: BPF prog-id=65 op=LOAD Jul 10 00:30:00.153000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400019b670 a2=78 a3=0 items=0 ppid=1662 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.153000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339313431613030323961633265303264623239363731633963363366 Jul 10 00:30:00.154000 audit: BPF prog-id=65 op=UNLOAD Jul 10 00:30:00.154000 audit: BPF prog-id=64 op=UNLOAD Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762663130316533333266633332353037306131373534663135363362 Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit: BPF prog-id=66 op=LOAD Jul 10 00:30:00.155000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1663 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762663130316533333266633332353037306131373534663135363362 Jul 10 00:30:00.155000 audit: BPF prog-id=66 op=UNLOAD Jul 10 00:30:00.155000 audit: BPF prog-id=62 op=UNLOAD Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { perfmon } for pid=1692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit[1692]: AVC avc: denied { bpf } for pid=1692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.155000 audit: BPF prog-id=67 op=LOAD Jul 10 00:30:00.155000 audit[1692]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1663 pid=1692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762663130316533333266633332353037306131373534663135363362 Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { perfmon } for pid=1693 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.154000 audit[1693]: AVC avc: denied { bpf } for pid=1693 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.154000 audit: BPF prog-id=68 op=LOAD Jul 10 00:30:00.154000 audit[1693]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400019bb40 a2=78 a3=0 items=0 ppid=1662 pid=1693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.154000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6339313431613030323961633265303264623239363731633963363366 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit: BPF prog-id=69 op=LOAD Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1665 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653331326262636236616563323231643230393265316664343039 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1665 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653331326262636236616563323231643230393265316664343039 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit: BPF prog-id=70 op=LOAD Jul 10 00:30:00.158000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1665 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653331326262636236616563323231643230393265316664343039 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.158000 audit: BPF prog-id=71 op=LOAD Jul 10 00:30:00.158000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1665 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.158000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653331326262636236616563323231643230393265316664343039 Jul 10 00:30:00.158000 audit: BPF prog-id=71 op=UNLOAD Jul 10 00:30:00.159000 audit: BPF prog-id=70 op=UNLOAD Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { perfmon } for pid=1691 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit[1691]: AVC avc: denied { bpf } for pid=1691 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.159000 audit: BPF prog-id=72 op=LOAD Jul 10 00:30:00.159000 audit[1691]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1665 pid=1691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.159000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564653331326262636236616563323231643230393265316664343039 Jul 10 00:30:00.161590 kubelet[1605]: E0710 00:30:00.161211 1605 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.46:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.46:6443: connect: connection refused" interval="1.6s" Jul 10 00:30:00.182619 env[1221]: time="2025-07-10T00:30:00.182554610Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:811f935311317e47b1311b36ef95498c,Namespace:kube-system,Attempt:0,} returns sandbox id \"7bf101e332fc325070a1754f1563b67a8ed0de8ffccf089376b2181c808432aa\"" Jul 10 00:30:00.184501 kubelet[1605]: E0710 00:30:00.184254 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:00.186356 env[1221]: time="2025-07-10T00:30:00.186274122Z" level=info msg="CreateContainer within sandbox \"7bf101e332fc325070a1754f1563b67a8ed0de8ffccf089376b2181c808432aa\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 00:30:00.190574 env[1221]: time="2025-07-10T00:30:00.190539335Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"5de312bbcb6aec221d2092e1fd409911f3bce39f6ca7d73beac7464a2dc21606\"" Jul 10 00:30:00.190903 env[1221]: time="2025-07-10T00:30:00.190869844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"c9141a0029ac2e02db29671c9c63fa9436960c8a1083f52e8f1248ad14e398e6\"" Jul 10 00:30:00.191978 kubelet[1605]: E0710 00:30:00.191626 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:00.191978 kubelet[1605]: E0710 00:30:00.191856 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:00.193447 env[1221]: time="2025-07-10T00:30:00.193409806Z" level=info msg="CreateContainer within sandbox \"5de312bbcb6aec221d2092e1fd409911f3bce39f6ca7d73beac7464a2dc21606\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 00:30:00.193869 env[1221]: time="2025-07-10T00:30:00.193839748Z" level=info msg="CreateContainer within sandbox \"c9141a0029ac2e02db29671c9c63fa9436960c8a1083f52e8f1248ad14e398e6\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 00:30:00.198514 kubelet[1605]: W0710 00:30:00.198328 1605 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.46:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.46:6443: connect: connection refused Jul 10 00:30:00.198514 kubelet[1605]: E0710 00:30:00.198397 1605 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.46:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.46:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:30:00.214258 env[1221]: time="2025-07-10T00:30:00.214186168Z" level=info msg="CreateContainer within sandbox \"7bf101e332fc325070a1754f1563b67a8ed0de8ffccf089376b2181c808432aa\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"117cf812ccab376b9f79804cadad760e6cafdd387b33afe01a040eb0c16764c0\"" Jul 10 00:30:00.215020 env[1221]: time="2025-07-10T00:30:00.214977350Z" level=info msg="StartContainer for \"117cf812ccab376b9f79804cadad760e6cafdd387b33afe01a040eb0c16764c0\"" Jul 10 00:30:00.216728 env[1221]: time="2025-07-10T00:30:00.216679273Z" level=info msg="CreateContainer within sandbox \"c9141a0029ac2e02db29671c9c63fa9436960c8a1083f52e8f1248ad14e398e6\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"a37c321750003a1fc48f4faee24f979af9933d49cc7a6dd2f4d799e636a5d207\"" Jul 10 00:30:00.217195 env[1221]: time="2025-07-10T00:30:00.217142587Z" level=info msg="StartContainer for \"a37c321750003a1fc48f4faee24f979af9933d49cc7a6dd2f4d799e636a5d207\"" Jul 10 00:30:00.218029 env[1221]: time="2025-07-10T00:30:00.217978504Z" level=info msg="CreateContainer within sandbox \"5de312bbcb6aec221d2092e1fd409911f3bce39f6ca7d73beac7464a2dc21606\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"c33795c82d665dc81651cd569f27d6325d5a3b8e3f851c862ebcde959a3c10aa\"" Jul 10 00:30:00.218585 env[1221]: time="2025-07-10T00:30:00.218549853Z" level=info msg="StartContainer for \"c33795c82d665dc81651cd569f27d6325d5a3b8e3f851c862ebcde959a3c10aa\"" Jul 10 00:30:00.232680 systemd[1]: Started cri-containerd-117cf812ccab376b9f79804cadad760e6cafdd387b33afe01a040eb0c16764c0.scope. Jul 10 00:30:00.251058 systemd[1]: Started cri-containerd-a37c321750003a1fc48f4faee24f979af9933d49cc7a6dd2f4d799e636a5d207.scope. Jul 10 00:30:00.251848 systemd[1]: Started cri-containerd-c33795c82d665dc81651cd569f27d6325d5a3b8e3f851c862ebcde959a3c10aa.scope. Jul 10 00:30:00.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit: BPF prog-id=73 op=LOAD Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333739356338326436363564633831363531636435363966323764 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333739356338326436363564633831363531636435363966323764 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit: BPF prog-id=74 op=LOAD Jul 10 00:30:00.305000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333739356338326436363564633831363531636435363966323764 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit: BPF prog-id=75 op=LOAD Jul 10 00:30:00.305000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333739356338326436363564633831363531636435363966323764 Jul 10 00:30:00.305000 audit: BPF prog-id=75 op=UNLOAD Jul 10 00:30:00.305000 audit: BPF prog-id=74 op=UNLOAD Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { perfmon } for pid=1790 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit[1790]: AVC avc: denied { bpf } for pid=1790 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.305000 audit: BPF prog-id=76 op=LOAD Jul 10 00:30:00.305000 audit[1790]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1665 pid=1790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.305000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333333739356338326436363564633831363531636435363966323764 Jul 10 00:30:00.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit: BPF prog-id=77 op=LOAD Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1663 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131376366383132636361623337366239663739383034636164616437 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1663 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131376366383132636361623337366239663739383034636164616437 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.313000 audit: BPF prog-id=78 op=LOAD Jul 10 00:30:00.313000 audit[1785]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1663 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131376366383132636361623337366239663739383034636164616437 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit: BPF prog-id=79 op=LOAD Jul 10 00:30:00.317000 audit[1785]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1663 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131376366383132636361623337366239663739383034636164616437 Jul 10 00:30:00.317000 audit: BPF prog-id=79 op=UNLOAD Jul 10 00:30:00.317000 audit: BPF prog-id=78 op=UNLOAD Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.317000 audit: BPF prog-id=80 op=LOAD Jul 10 00:30:00.317000 audit[1785]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1663 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.317000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131376366383132636361623337366239663739383034636164616437 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.328000 audit: BPF prog-id=81 op=LOAD Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1662 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133376333323137353030303361316663343866346661656532346639 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1662 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133376333323137353030303361316663343866346661656532346639 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.331000 audit: BPF prog-id=82 op=LOAD Jul 10 00:30:00.331000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1662 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.331000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133376333323137353030303361316663343866346661656532346639 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit: BPF prog-id=83 op=LOAD Jul 10 00:30:00.334000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1662 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133376333323137353030303361316663343866346661656532346639 Jul 10 00:30:00.334000 audit: BPF prog-id=83 op=UNLOAD Jul 10 00:30:00.334000 audit: BPF prog-id=82 op=UNLOAD Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { perfmon } for pid=1789 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit[1789]: AVC avc: denied { bpf } for pid=1789 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:00.334000 audit: BPF prog-id=84 op=LOAD Jul 10 00:30:00.334000 audit[1789]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1662 pid=1789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:00.334000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133376333323137353030303361316663343866346661656532346639 Jul 10 00:30:00.337336 env[1221]: time="2025-07-10T00:30:00.337278700Z" level=info msg="StartContainer for \"c33795c82d665dc81651cd569f27d6325d5a3b8e3f851c862ebcde959a3c10aa\" returns successfully" Jul 10 00:30:00.368392 env[1221]: time="2025-07-10T00:30:00.368331706Z" level=info msg="StartContainer for \"117cf812ccab376b9f79804cadad760e6cafdd387b33afe01a040eb0c16764c0\" returns successfully" Jul 10 00:30:00.414420 kubelet[1605]: I0710 00:30:00.414004 1605 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:30:00.414540 kubelet[1605]: E0710 00:30:00.414414 1605 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.46:6443/api/v1/nodes\": dial tcp 10.0.0.46:6443: connect: connection refused" node="localhost" Jul 10 00:30:00.420591 env[1221]: time="2025-07-10T00:30:00.420539520Z" level=info msg="StartContainer for \"a37c321750003a1fc48f4faee24f979af9933d49cc7a6dd2f4d799e636a5d207\" returns successfully" Jul 10 00:30:00.789801 kubelet[1605]: E0710 00:30:00.789614 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:00.790659 kubelet[1605]: E0710 00:30:00.790470 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:00.792531 kubelet[1605]: E0710 00:30:00.792451 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:01.794499 kubelet[1605]: E0710 00:30:01.794471 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:01.893000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:01.893000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400059e690 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:01.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:01.893000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:01.893000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40004996e0 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:01.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:02.015661 kubelet[1605]: I0710 00:30:02.015630 1605 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:30:02.282000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.283524 kernel: kauditd_printk_skb: 565 callbacks suppressed Jul 10 00:30:02.283581 kernel: audit: type=1400 audit(1752107402.282:561): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.282000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.289563 kernel: audit: type=1400 audit(1752107402.282:562): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.289635 kernel: audit: type=1300 audit(1752107402.282:562): arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40051dc030 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:30:02.282000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=42 a1=40051dc030 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:30:02.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:30:02.296710 kernel: audit: type=1327 audit(1752107402.282:562): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:30:02.282000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=40011d02e0 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:30:02.300532 kernel: audit: type=1300 audit(1752107402.282:561): arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=40011d02e0 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:30:02.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:30:02.303797 kernel: audit: type=1327 audit(1752107402.282:561): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:30:02.283000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.306813 kernel: audit: type=1400 audit(1752107402.283:563): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.306888 kernel: audit: type=1300 audit(1752107402.283:563): arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004c6dc20 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:30:02.283000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4004c6dc20 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:30:02.283000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:30:02.313974 kernel: audit: type=1327 audit(1752107402.283:563): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:30:02.293000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.316974 kernel: audit: type=1400 audit(1752107402.293:564): avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.293000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=4006512ca0 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:30:02.293000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:30:02.293000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.293000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=70 a1=40051dc360 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:30:02.293000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:30:02.311000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:02.311000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=56 a1=40037fafc0 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:30:02.311000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:30:02.374299 kubelet[1605]: I0710 00:30:02.374262 1605 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 10 00:30:02.374427 kubelet[1605]: E0710 00:30:02.374322 1605 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 10 00:30:02.386251 kubelet[1605]: E0710 00:30:02.386211 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:02.487226 kubelet[1605]: E0710 00:30:02.487180 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:02.587804 kubelet[1605]: E0710 00:30:02.587694 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:02.688277 kubelet[1605]: E0710 00:30:02.688220 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:02.788544 kubelet[1605]: E0710 00:30:02.788495 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:02.795623 kubelet[1605]: E0710 00:30:02.795597 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:02.889019 kubelet[1605]: E0710 00:30:02.888924 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:02.989668 kubelet[1605]: E0710 00:30:02.989628 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:03.090213 kubelet[1605]: E0710 00:30:03.090161 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:03.190845 kubelet[1605]: E0710 00:30:03.190710 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:03.291699 kubelet[1605]: E0710 00:30:03.291648 1605 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:03.540576 kubelet[1605]: E0710 00:30:03.540450 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:03.744387 kubelet[1605]: I0710 00:30:03.744346 1605 apiserver.go:52] "Watching apiserver" Jul 10 00:30:03.758354 kubelet[1605]: I0710 00:30:03.758307 1605 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 10 00:30:03.796375 kubelet[1605]: E0710 00:30:03.796276 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:03.936268 kubelet[1605]: E0710 00:30:03.936223 1605 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:04.366846 systemd[1]: Reloading. Jul 10 00:30:04.434479 /usr/lib/systemd/system-generators/torcx-generator[1906]: time="2025-07-10T00:30:04Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:30:04.434892 /usr/lib/systemd/system-generators/torcx-generator[1906]: time="2025-07-10T00:30:04Z" level=info msg="torcx already run" Jul 10 00:30:04.496601 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:30:04.496857 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:30:04.512552 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:30:04.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.572000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.572000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.573000 audit: BPF prog-id=85 op=LOAD Jul 10 00:30:04.573000 audit: BPF prog-id=69 op=UNLOAD Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.575000 audit: BPF prog-id=86 op=LOAD Jul 10 00:30:04.576000 audit: BPF prog-id=46 op=UNLOAD Jul 10 00:30:04.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.577000 audit: BPF prog-id=87 op=LOAD Jul 10 00:30:04.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.578000 audit: BPF prog-id=88 op=LOAD Jul 10 00:30:04.578000 audit: BPF prog-id=47 op=UNLOAD Jul 10 00:30:04.578000 audit: BPF prog-id=48 op=UNLOAD Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.580000 audit: BPF prog-id=89 op=LOAD Jul 10 00:30:04.580000 audit: BPF prog-id=49 op=UNLOAD Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit: BPF prog-id=90 op=LOAD Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.581000 audit: BPF prog-id=91 op=LOAD Jul 10 00:30:04.581000 audit: BPF prog-id=50 op=UNLOAD Jul 10 00:30:04.581000 audit: BPF prog-id=51 op=UNLOAD Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit: BPF prog-id=92 op=LOAD Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.583000 audit: BPF prog-id=93 op=LOAD Jul 10 00:30:04.583000 audit: BPF prog-id=52 op=UNLOAD Jul 10 00:30:04.583000 audit: BPF prog-id=53 op=UNLOAD Jul 10 00:30:04.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.584000 audit: BPF prog-id=94 op=LOAD Jul 10 00:30:04.584000 audit: BPF prog-id=61 op=UNLOAD Jul 10 00:30:04.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.586000 audit: BPF prog-id=95 op=LOAD Jul 10 00:30:04.586000 audit: BPF prog-id=54 op=UNLOAD Jul 10 00:30:04.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit: BPF prog-id=96 op=LOAD Jul 10 00:30:04.587000 audit: BPF prog-id=55 op=UNLOAD Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit: BPF prog-id=97 op=LOAD Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit: BPF prog-id=98 op=LOAD Jul 10 00:30:04.588000 audit: BPF prog-id=56 op=UNLOAD Jul 10 00:30:04.588000 audit: BPF prog-id=57 op=UNLOAD Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit: BPF prog-id=99 op=LOAD Jul 10 00:30:04.590000 audit: BPF prog-id=58 op=UNLOAD Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.590000 audit: BPF prog-id=100 op=LOAD Jul 10 00:30:04.590000 audit: BPF prog-id=59 op=UNLOAD Jul 10 00:30:04.590000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit: BPF prog-id=101 op=LOAD Jul 10 00:30:04.591000 audit: BPF prog-id=77 op=UNLOAD Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.591000 audit: BPF prog-id=102 op=LOAD Jul 10 00:30:04.592000 audit: BPF prog-id=60 op=UNLOAD Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.592000 audit: BPF prog-id=103 op=LOAD Jul 10 00:30:04.592000 audit: BPF prog-id=81 op=UNLOAD Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit: BPF prog-id=104 op=LOAD Jul 10 00:30:04.593000 audit: BPF prog-id=73 op=UNLOAD Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.593000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.594000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.594000 audit: BPF prog-id=105 op=LOAD Jul 10 00:30:04.594000 audit: BPF prog-id=63 op=UNLOAD Jul 10 00:30:04.615499 systemd[1]: Stopping kubelet.service... Jul 10 00:30:04.642560 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:30:04.642746 systemd[1]: Stopped kubelet.service. Jul 10 00:30:04.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:04.642808 systemd[1]: kubelet.service: Consumed 1.600s CPU time. Jul 10 00:30:04.644450 systemd[1]: Starting kubelet.service... Jul 10 00:30:04.734225 systemd[1]: Started kubelet.service. Jul 10 00:30:04.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:04.777940 kubelet[1946]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:30:04.777940 kubelet[1946]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 10 00:30:04.777940 kubelet[1946]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:30:04.778264 kubelet[1946]: I0710 00:30:04.777966 1946 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:30:04.784657 kubelet[1946]: I0710 00:30:04.784620 1946 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 10 00:30:04.784841 kubelet[1946]: I0710 00:30:04.784805 1946 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:30:04.785153 kubelet[1946]: I0710 00:30:04.785136 1946 server.go:934] "Client rotation is on, will bootstrap in background" Jul 10 00:30:04.786602 kubelet[1946]: I0710 00:30:04.786579 1946 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 10 00:30:04.788780 kubelet[1946]: I0710 00:30:04.788742 1946 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:30:04.792082 kubelet[1946]: E0710 00:30:04.792055 1946 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:30:04.792082 kubelet[1946]: I0710 00:30:04.792082 1946 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:30:04.794377 kubelet[1946]: I0710 00:30:04.794355 1946 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:30:04.794563 kubelet[1946]: I0710 00:30:04.794548 1946 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 10 00:30:04.794797 kubelet[1946]: I0710 00:30:04.794731 1946 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:30:04.795046 kubelet[1946]: I0710 00:30:04.794872 1946 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:30:04.795209 kubelet[1946]: I0710 00:30:04.795194 1946 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:30:04.795274 kubelet[1946]: I0710 00:30:04.795265 1946 container_manager_linux.go:300] "Creating device plugin manager" Jul 10 00:30:04.795376 kubelet[1946]: I0710 00:30:04.795365 1946 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:30:04.795539 kubelet[1946]: I0710 00:30:04.795525 1946 kubelet.go:408] "Attempting to sync node with API server" Jul 10 00:30:04.795627 kubelet[1946]: I0710 00:30:04.795614 1946 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:30:04.795694 kubelet[1946]: I0710 00:30:04.795685 1946 kubelet.go:314] "Adding apiserver pod source" Jul 10 00:30:04.795759 kubelet[1946]: I0710 00:30:04.795749 1946 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:30:04.796995 kubelet[1946]: I0710 00:30:04.796965 1946 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:30:04.797546 kubelet[1946]: I0710 00:30:04.797524 1946 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:30:04.797981 kubelet[1946]: I0710 00:30:04.797958 1946 server.go:1274] "Started kubelet" Jul 10 00:30:04.798000 audit[1946]: AVC avc: denied { mac_admin } for pid=1946 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.798000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:30:04.798000 audit[1946]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000c40990 a1=40006c54b8 a2=4000c40960 a3=25 items=0 ppid=1 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:04.798000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:30:04.798000 audit[1946]: AVC avc: denied { mac_admin } for pid=1946 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.798000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:30:04.798000 audit[1946]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b34fc0 a1=40006c54d0 a2=4000c40a20 a3=25 items=0 ppid=1 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:04.798000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:30:04.800367 kubelet[1946]: I0710 00:30:04.800110 1946 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:30:04.800367 kubelet[1946]: I0710 00:30:04.800156 1946 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 10 00:30:04.800367 kubelet[1946]: I0710 00:30:04.800179 1946 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:30:04.801156 kubelet[1946]: I0710 00:30:04.801125 1946 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:30:04.802959 kubelet[1946]: I0710 00:30:04.802514 1946 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 10 00:30:04.802959 kubelet[1946]: I0710 00:30:04.802542 1946 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:30:04.802959 kubelet[1946]: I0710 00:30:04.802606 1946 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 10 00:30:04.802959 kubelet[1946]: I0710 00:30:04.802682 1946 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:30:04.802959 kubelet[1946]: I0710 00:30:04.802717 1946 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:30:04.802959 kubelet[1946]: I0710 00:30:04.802929 1946 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:30:04.804743 kubelet[1946]: I0710 00:30:04.804701 1946 server.go:449] "Adding debug handlers to kubelet server" Jul 10 00:30:04.807561 kubelet[1946]: I0710 00:30:04.807237 1946 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:30:04.811160 kubelet[1946]: E0710 00:30:04.810970 1946 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:30:04.819954 kubelet[1946]: I0710 00:30:04.819919 1946 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:30:04.819954 kubelet[1946]: I0710 00:30:04.819943 1946 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:30:04.827620 kubelet[1946]: I0710 00:30:04.827584 1946 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:30:04.828631 kubelet[1946]: I0710 00:30:04.828612 1946 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:30:04.828780 kubelet[1946]: I0710 00:30:04.828768 1946 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 10 00:30:04.828883 kubelet[1946]: I0710 00:30:04.828873 1946 kubelet.go:2321] "Starting kubelet main sync loop" Jul 10 00:30:04.828991 kubelet[1946]: E0710 00:30:04.828972 1946 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:30:04.852571 kubelet[1946]: I0710 00:30:04.852544 1946 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 10 00:30:04.852571 kubelet[1946]: I0710 00:30:04.852565 1946 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 10 00:30:04.852716 kubelet[1946]: I0710 00:30:04.852586 1946 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:30:04.852743 kubelet[1946]: I0710 00:30:04.852718 1946 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 00:30:04.852743 kubelet[1946]: I0710 00:30:04.852728 1946 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 00:30:04.852831 kubelet[1946]: I0710 00:30:04.852746 1946 policy_none.go:49] "None policy: Start" Jul 10 00:30:04.853470 kubelet[1946]: I0710 00:30:04.853441 1946 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 10 00:30:04.853596 kubelet[1946]: I0710 00:30:04.853584 1946 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:30:04.853820 kubelet[1946]: I0710 00:30:04.853800 1946 state_mem.go:75] "Updated machine memory state" Jul 10 00:30:04.857877 kubelet[1946]: I0710 00:30:04.857857 1946 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:30:04.858000 audit[1946]: AVC avc: denied { mac_admin } for pid=1946 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:04.858000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:30:04.858000 audit[1946]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4001136210 a1=40005fa8d0 a2=40011361e0 a3=25 items=0 ppid=1 pid=1946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:04.858000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:30:04.860820 kubelet[1946]: I0710 00:30:04.860800 1946 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:30:04.861087 kubelet[1946]: I0710 00:30:04.861074 1946 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:30:04.861219 kubelet[1946]: I0710 00:30:04.861188 1946 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:30:04.861612 kubelet[1946]: I0710 00:30:04.861507 1946 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:30:04.938046 kubelet[1946]: E0710 00:30:04.937942 1946 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:30:04.938341 kubelet[1946]: E0710 00:30:04.938299 1946 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 10 00:30:04.966570 kubelet[1946]: I0710 00:30:04.966026 1946 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 10 00:30:04.972153 kubelet[1946]: I0710 00:30:04.972120 1946 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 10 00:30:04.972306 kubelet[1946]: I0710 00:30:04.972207 1946 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 10 00:30:05.003895 kubelet[1946]: I0710 00:30:05.003840 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/811f935311317e47b1311b36ef95498c-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"811f935311317e47b1311b36ef95498c\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:30:05.003895 kubelet[1946]: I0710 00:30:05.003893 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/811f935311317e47b1311b36ef95498c-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"811f935311317e47b1311b36ef95498c\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:30:05.004045 kubelet[1946]: I0710 00:30:05.003916 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:30:05.004045 kubelet[1946]: I0710 00:30:05.003935 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:30:05.004045 kubelet[1946]: I0710 00:30:05.003953 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/811f935311317e47b1311b36ef95498c-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"811f935311317e47b1311b36ef95498c\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:30:05.004045 kubelet[1946]: I0710 00:30:05.003969 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:30:05.004045 kubelet[1946]: I0710 00:30:05.003984 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:30:05.004175 kubelet[1946]: I0710 00:30:05.003999 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:30:05.004175 kubelet[1946]: I0710 00:30:05.004015 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:30:05.235946 kubelet[1946]: E0710 00:30:05.235821 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:05.238354 kubelet[1946]: E0710 00:30:05.238243 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:05.239325 kubelet[1946]: E0710 00:30:05.239287 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:05.812098 kubelet[1946]: I0710 00:30:05.812052 1946 apiserver.go:52] "Watching apiserver" Jul 10 00:30:05.842069 kubelet[1946]: E0710 00:30:05.842032 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:05.842188 kubelet[1946]: E0710 00:30:05.842032 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:05.842464 kubelet[1946]: E0710 00:30:05.842421 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:05.865629 kubelet[1946]: I0710 00:30:05.865572 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.865556609 podStartE2EDuration="1.865556609s" podCreationTimestamp="2025-07-10 00:30:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:30:05.865530125 +0000 UTC m=+1.125732779" watchObservedRunningTime="2025-07-10 00:30:05.865556609 +0000 UTC m=+1.125759263" Jul 10 00:30:05.887101 kubelet[1946]: I0710 00:30:05.887044 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=2.887026417 podStartE2EDuration="2.887026417s" podCreationTimestamp="2025-07-10 00:30:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:30:05.879688651 +0000 UTC m=+1.139891305" watchObservedRunningTime="2025-07-10 00:30:05.887026417 +0000 UTC m=+1.147229071" Jul 10 00:30:05.895018 kubelet[1946]: I0710 00:30:05.894956 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=2.894942362 podStartE2EDuration="2.894942362s" podCreationTimestamp="2025-07-10 00:30:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:30:05.887552067 +0000 UTC m=+1.147754721" watchObservedRunningTime="2025-07-10 00:30:05.894942362 +0000 UTC m=+1.155145016" Jul 10 00:30:05.903689 kubelet[1946]: I0710 00:30:05.903655 1946 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 10 00:30:06.843870 kubelet[1946]: E0710 00:30:06.843832 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:07.991000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:30:07.992633 kernel: kauditd_printk_skb: 266 callbacks suppressed Jul 10 00:30:07.992693 kernel: audit: type=1400 audit(1752107407.991:816): avc: denied { watch } for pid=1828 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:30:07.991000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000830740 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:07.999508 kernel: audit: type=1300 audit(1752107407.991:816): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000830740 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:07.999559 kernel: audit: type=1327 audit(1752107407.991:816): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:07.991000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:08.292000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:08.292000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f36fe0 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:08.299728 kernel: audit: type=1400 audit(1752107408.292:817): avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:08.299793 kernel: audit: type=1300 audit(1752107408.292:817): arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f36fe0 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:08.299810 kernel: audit: type=1327 audit(1752107408.292:817): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:08.292000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:08.292000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:08.305989 kernel: audit: type=1400 audit(1752107408.292:818): avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:08.306027 kernel: audit: type=1300 audit(1752107408.292:818): arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40009eee80 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:08.292000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40009eee80 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:08.292000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:08.313276 kernel: audit: type=1327 audit(1752107408.292:818): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:08.313335 kernel: audit: type=1400 audit(1752107408.293:819): avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:08.293000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:08.293000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000f37020 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:08.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:08.293000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:30:08.293000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40009ef040 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:30:08.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:30:09.986546 kubelet[1946]: I0710 00:30:09.986513 1946 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 00:30:09.986874 env[1221]: time="2025-07-10T00:30:09.986805356Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 00:30:09.987068 kubelet[1946]: I0710 00:30:09.987046 1946 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 00:30:10.136795 kubelet[1946]: E0710 00:30:10.136767 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:10.706803 systemd[1]: Created slice kubepods-besteffort-pod2df4b5ff_6215_45c7_826b_04604b97ab9e.slice. Jul 10 00:30:10.742211 kubelet[1946]: I0710 00:30:10.742168 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/2df4b5ff-6215-45c7-826b-04604b97ab9e-kube-proxy\") pod \"kube-proxy-gh6xd\" (UID: \"2df4b5ff-6215-45c7-826b-04604b97ab9e\") " pod="kube-system/kube-proxy-gh6xd" Jul 10 00:30:10.742211 kubelet[1946]: I0710 00:30:10.742208 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2df4b5ff-6215-45c7-826b-04604b97ab9e-xtables-lock\") pod \"kube-proxy-gh6xd\" (UID: \"2df4b5ff-6215-45c7-826b-04604b97ab9e\") " pod="kube-system/kube-proxy-gh6xd" Jul 10 00:30:10.742384 kubelet[1946]: I0710 00:30:10.742230 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2df4b5ff-6215-45c7-826b-04604b97ab9e-lib-modules\") pod \"kube-proxy-gh6xd\" (UID: \"2df4b5ff-6215-45c7-826b-04604b97ab9e\") " pod="kube-system/kube-proxy-gh6xd" Jul 10 00:30:10.742384 kubelet[1946]: I0710 00:30:10.742247 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-brqmm\" (UniqueName: \"kubernetes.io/projected/2df4b5ff-6215-45c7-826b-04604b97ab9e-kube-api-access-brqmm\") pod \"kube-proxy-gh6xd\" (UID: \"2df4b5ff-6215-45c7-826b-04604b97ab9e\") " pod="kube-system/kube-proxy-gh6xd" Jul 10 00:30:10.850068 kubelet[1946]: E0710 00:30:10.850035 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:10.850251 kubelet[1946]: E0710 00:30:10.850056 1946 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Jul 10 00:30:10.850340 kubelet[1946]: E0710 00:30:10.850306 1946 projected.go:194] Error preparing data for projected volume kube-api-access-brqmm for pod kube-system/kube-proxy-gh6xd: configmap "kube-root-ca.crt" not found Jul 10 00:30:10.850463 kubelet[1946]: E0710 00:30:10.850450 1946 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/2df4b5ff-6215-45c7-826b-04604b97ab9e-kube-api-access-brqmm podName:2df4b5ff-6215-45c7-826b-04604b97ab9e nodeName:}" failed. No retries permitted until 2025-07-10 00:30:11.350430781 +0000 UTC m=+6.610633435 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-brqmm" (UniqueName: "kubernetes.io/projected/2df4b5ff-6215-45c7-826b-04604b97ab9e-kube-api-access-brqmm") pod "kube-proxy-gh6xd" (UID: "2df4b5ff-6215-45c7-826b-04604b97ab9e") : configmap "kube-root-ca.crt" not found Jul 10 00:30:11.128268 systemd[1]: Created slice kubepods-besteffort-pod244ca512_46eb_44ce_94b1_44f314022f2e.slice. Jul 10 00:30:11.145144 kubelet[1946]: I0710 00:30:11.145089 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/244ca512-46eb-44ce-94b1-44f314022f2e-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-h6t4r\" (UID: \"244ca512-46eb-44ce-94b1-44f314022f2e\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-h6t4r" Jul 10 00:30:11.145144 kubelet[1946]: I0710 00:30:11.145147 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pwwgs\" (UniqueName: \"kubernetes.io/projected/244ca512-46eb-44ce-94b1-44f314022f2e-kube-api-access-pwwgs\") pod \"tigera-operator-5bf8dfcb4-h6t4r\" (UID: \"244ca512-46eb-44ce-94b1-44f314022f2e\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-h6t4r" Jul 10 00:30:11.158783 kubelet[1946]: E0710 00:30:11.158749 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:11.253202 kubelet[1946]: I0710 00:30:11.253172 1946 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 00:30:11.432127 env[1221]: time="2025-07-10T00:30:11.432026991Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-h6t4r,Uid:244ca512-46eb-44ce-94b1-44f314022f2e,Namespace:tigera-operator,Attempt:0,}" Jul 10 00:30:11.449234 env[1221]: time="2025-07-10T00:30:11.449166111Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:11.449234 env[1221]: time="2025-07-10T00:30:11.449206154Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:11.449393 env[1221]: time="2025-07-10T00:30:11.449240917Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:11.449418 env[1221]: time="2025-07-10T00:30:11.449389728Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1425f3650c9532b1b04b2d9434641056209f02c70f0cff4ad4cb182b43f53e23 pid=2001 runtime=io.containerd.runc.v2 Jul 10 00:30:11.464351 systemd[1]: Started cri-containerd-1425f3650c9532b1b04b2d9434641056209f02c70f0cff4ad4cb182b43f53e23.scope. Jul 10 00:30:11.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.481000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.481000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit: BPF prog-id=106 op=LOAD Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=2001 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134323566333635306339353332623162303462326439343334363431 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2001 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134323566333635306339353332623162303462326439343334363431 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.482000 audit: BPF prog-id=107 op=LOAD Jul 10 00:30:11.482000 audit[2012]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2001 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134323566333635306339353332623162303462326439343334363431 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit: BPF prog-id=108 op=LOAD Jul 10 00:30:11.483000 audit[2012]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2001 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134323566333635306339353332623162303462326439343334363431 Jul 10 00:30:11.483000 audit: BPF prog-id=108 op=UNLOAD Jul 10 00:30:11.483000 audit: BPF prog-id=107 op=UNLOAD Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { perfmon } for pid=2012 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit[2012]: AVC avc: denied { bpf } for pid=2012 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.483000 audit: BPF prog-id=109 op=LOAD Jul 10 00:30:11.483000 audit[2012]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2001 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3134323566333635306339353332623162303462326439343334363431 Jul 10 00:30:11.504119 env[1221]: time="2025-07-10T00:30:11.504070132Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-h6t4r,Uid:244ca512-46eb-44ce-94b1-44f314022f2e,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"1425f3650c9532b1b04b2d9434641056209f02c70f0cff4ad4cb182b43f53e23\"" Jul 10 00:30:11.506919 env[1221]: time="2025-07-10T00:30:11.505934991Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 00:30:11.616753 kubelet[1946]: E0710 00:30:11.616712 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:11.617729 env[1221]: time="2025-07-10T00:30:11.617605171Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-gh6xd,Uid:2df4b5ff-6215-45c7-826b-04604b97ab9e,Namespace:kube-system,Attempt:0,}" Jul 10 00:30:11.630839 env[1221]: time="2025-07-10T00:30:11.630774715Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:11.630983 env[1221]: time="2025-07-10T00:30:11.630815598Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:11.630983 env[1221]: time="2025-07-10T00:30:11.630829759Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:11.630983 env[1221]: time="2025-07-10T00:30:11.630946807Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bc6351fb92ed111bd79fb89855d02a1f7d9dc9a28bfb0f04db081852e67c9378 pid=2043 runtime=io.containerd.runc.v2 Jul 10 00:30:11.640017 systemd[1]: Started cri-containerd-bc6351fb92ed111bd79fb89855d02a1f7d9dc9a28bfb0f04db081852e67c9378.scope. Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit: BPF prog-id=110 op=LOAD Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363335316662393265643131316264373966623839383535643032 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363335316662393265643131316264373966623839383535643032 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.665000 audit: BPF prog-id=111 op=LOAD Jul 10 00:30:11.665000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363335316662393265643131316264373966623839383535643032 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit: BPF prog-id=112 op=LOAD Jul 10 00:30:11.666000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363335316662393265643131316264373966623839383535643032 Jul 10 00:30:11.666000 audit: BPF prog-id=112 op=UNLOAD Jul 10 00:30:11.666000 audit: BPF prog-id=111 op=UNLOAD Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { perfmon } for pid=2052 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit[2052]: AVC avc: denied { bpf } for pid=2052 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.666000 audit: BPF prog-id=113 op=LOAD Jul 10 00:30:11.666000 audit[2052]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=2043 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.666000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263363335316662393265643131316264373966623839383535643032 Jul 10 00:30:11.679392 env[1221]: time="2025-07-10T00:30:11.679349623Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-gh6xd,Uid:2df4b5ff-6215-45c7-826b-04604b97ab9e,Namespace:kube-system,Attempt:0,} returns sandbox id \"bc6351fb92ed111bd79fb89855d02a1f7d9dc9a28bfb0f04db081852e67c9378\"" Jul 10 00:30:11.680161 kubelet[1946]: E0710 00:30:11.680138 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:11.685363 env[1221]: time="2025-07-10T00:30:11.683599060Z" level=info msg="CreateContainer within sandbox \"bc6351fb92ed111bd79fb89855d02a1f7d9dc9a28bfb0f04db081852e67c9378\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 00:30:11.695158 env[1221]: time="2025-07-10T00:30:11.695109560Z" level=info msg="CreateContainer within sandbox \"bc6351fb92ed111bd79fb89855d02a1f7d9dc9a28bfb0f04db081852e67c9378\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"7daccb1a8c3a84da0913a2a2ab26a95b04152c1ac9d92a7e4f5ce47ee404abf3\"" Jul 10 00:30:11.695827 env[1221]: time="2025-07-10T00:30:11.695629198Z" level=info msg="StartContainer for \"7daccb1a8c3a84da0913a2a2ab26a95b04152c1ac9d92a7e4f5ce47ee404abf3\"" Jul 10 00:30:11.721833 systemd[1]: Started cri-containerd-7daccb1a8c3a84da0913a2a2ab26a95b04152c1ac9d92a7e4f5ce47ee404abf3.scope. Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2043 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764616363623161386333613834646130393133613261326162323661 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.745000 audit: BPF prog-id=114 op=LOAD Jul 10 00:30:11.745000 audit[2084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2043 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764616363623161386333613834646130393133613261326162323661 Jul 10 00:30:11.746000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.746000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.746000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.746000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.746000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.746000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.746000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.746000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.746000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.746000 audit: BPF prog-id=115 op=LOAD Jul 10 00:30:11.746000 audit[2084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2043 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764616363623161386333613834646130393133613261326162323661 Jul 10 00:30:11.748000 audit: BPF prog-id=115 op=UNLOAD Jul 10 00:30:11.748000 audit: BPF prog-id=114 op=UNLOAD Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { perfmon } for pid=2084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit[2084]: AVC avc: denied { bpf } for pid=2084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:11.748000 audit: BPF prog-id=116 op=LOAD Jul 10 00:30:11.748000 audit[2084]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2043 pid=2084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.748000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3764616363623161386333613834646130393133613261326162323661 Jul 10 00:30:11.764341 env[1221]: time="2025-07-10T00:30:11.763219446Z" level=info msg="StartContainer for \"7daccb1a8c3a84da0913a2a2ab26a95b04152c1ac9d92a7e4f5ce47ee404abf3\" returns successfully" Jul 10 00:30:11.854146 kubelet[1946]: E0710 00:30:11.854112 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:11.855824 kubelet[1946]: E0710 00:30:11.855487 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:11.866431 kubelet[1946]: I0710 00:30:11.865818 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-gh6xd" podStartSLOduration=1.865804188 podStartE2EDuration="1.865804188s" podCreationTimestamp="2025-07-10 00:30:10 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:30:11.865510086 +0000 UTC m=+7.125712740" watchObservedRunningTime="2025-07-10 00:30:11.865804188 +0000 UTC m=+7.126006842" Jul 10 00:30:11.967000 audit[2147]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2147 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:11.967000 audit[2147]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffced57fa0 a2=0 a3=1 items=0 ppid=2095 pid=2147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.967000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:30:11.968000 audit[2149]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2149 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:11.968000 audit[2149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff64b46c0 a2=0 a3=1 items=0 ppid=2095 pid=2149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.968000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:30:11.969000 audit[2146]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2146 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:11.969000 audit[2146]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffff95ef20 a2=0 a3=1 items=0 ppid=2095 pid=2146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.969000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:30:11.969000 audit[2150]: NETFILTER_CFG table=filter:41 family=2 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:11.969000 audit[2150]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe67e0cd0 a2=0 a3=1 items=0 ppid=2095 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.969000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:30:11.970000 audit[2151]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:11.970000 audit[2151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdd5196f0 a2=0 a3=1 items=0 ppid=2095 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.970000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:30:11.972000 audit[2152]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:11.972000 audit[2152]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffccb77690 a2=0 a3=1 items=0 ppid=2095 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:11.972000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:30:12.069000 audit[2153]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.069000 audit[2153]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffedf7daa0 a2=0 a3=1 items=0 ppid=2095 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.069000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:30:12.073000 audit[2155]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.073000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffebadf670 a2=0 a3=1 items=0 ppid=2095 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.073000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 00:30:12.078000 audit[2158]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.078000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffcf4dfce0 a2=0 a3=1 items=0 ppid=2095 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.078000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 00:30:12.079000 audit[2159]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.079000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc5f85650 a2=0 a3=1 items=0 ppid=2095 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.079000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:30:12.081000 audit[2161]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.081000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe1c086a0 a2=0 a3=1 items=0 ppid=2095 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.081000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:30:12.082000 audit[2162]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.082000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd61816f0 a2=0 a3=1 items=0 ppid=2095 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.082000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:30:12.084000 audit[2164]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.084000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffecfef750 a2=0 a3=1 items=0 ppid=2095 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.084000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:30:12.087000 audit[2167]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.087000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffda759f60 a2=0 a3=1 items=0 ppid=2095 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.087000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 00:30:12.088000 audit[2168]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.088000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe2d5a040 a2=0 a3=1 items=0 ppid=2095 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.088000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:30:12.092000 audit[2170]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.092000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffef941fd0 a2=0 a3=1 items=0 ppid=2095 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.092000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:30:12.093000 audit[2171]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.093000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd3a058a0 a2=0 a3=1 items=0 ppid=2095 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.093000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:30:12.096000 audit[2173]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.096000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe7331d40 a2=0 a3=1 items=0 ppid=2095 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.096000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:30:12.099000 audit[2176]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.099000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffde5b18a0 a2=0 a3=1 items=0 ppid=2095 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.099000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:30:12.102000 audit[2179]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.102000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffefe880d0 a2=0 a3=1 items=0 ppid=2095 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.102000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:30:12.103000 audit[2180]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.103000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffdf617240 a2=0 a3=1 items=0 ppid=2095 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.103000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:30:12.105000 audit[2182]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.105000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffdf386da0 a2=0 a3=1 items=0 ppid=2095 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.105000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:30:12.108000 audit[2185]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.108000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffe4484f50 a2=0 a3=1 items=0 ppid=2095 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.108000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:30:12.110000 audit[2186]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.110000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc4788e00 a2=0 a3=1 items=0 ppid=2095 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.110000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:30:12.112000 audit[2188]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:30:12.112000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffcaf91c20 a2=0 a3=1 items=0 ppid=2095 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.112000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:30:12.133000 audit[2194]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:12.133000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffd5e48180 a2=0 a3=1 items=0 ppid=2095 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.133000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:12.144000 audit[2194]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:12.144000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffd5e48180 a2=0 a3=1 items=0 ppid=2095 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.144000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:12.145000 audit[2199]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2199 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.145000 audit[2199]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffc994e1f0 a2=0 a3=1 items=0 ppid=2095 pid=2199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.145000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:30:12.147000 audit[2201]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.147000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc260ebc0 a2=0 a3=1 items=0 ppid=2095 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.147000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 00:30:12.150000 audit[2204]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.150000 audit[2204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffff0331e0 a2=0 a3=1 items=0 ppid=2095 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.150000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 00:30:12.151000 audit[2205]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2205 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.151000 audit[2205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcbce6350 a2=0 a3=1 items=0 ppid=2095 pid=2205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.151000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:30:12.153000 audit[2207]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2207 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.153000 audit[2207]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffffe696cf0 a2=0 a3=1 items=0 ppid=2095 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.153000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:30:12.154000 audit[2208]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.154000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeedb29c0 a2=0 a3=1 items=0 ppid=2095 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.154000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:30:12.156000 audit[2210]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.156000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffe6685f20 a2=0 a3=1 items=0 ppid=2095 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.156000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 00:30:12.159000 audit[2213]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.159000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffd4b47150 a2=0 a3=1 items=0 ppid=2095 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.159000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:30:12.160000 audit[2214]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.160000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd2e6d170 a2=0 a3=1 items=0 ppid=2095 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.160000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:30:12.163000 audit[2216]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.163000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd11a6bc0 a2=0 a3=1 items=0 ppid=2095 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.163000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:30:12.164000 audit[2217]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.164000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff87b8920 a2=0 a3=1 items=0 ppid=2095 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.164000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:30:12.166000 audit[2219]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.166000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffbcc0ed0 a2=0 a3=1 items=0 ppid=2095 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.166000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:30:12.169000 audit[2222]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.169000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1d6be70 a2=0 a3=1 items=0 ppid=2095 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.169000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:30:12.173000 audit[2225]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.173000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffec1525a0 a2=0 a3=1 items=0 ppid=2095 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.173000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 00:30:12.174000 audit[2226]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.174000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffede25990 a2=0 a3=1 items=0 ppid=2095 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.174000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:30:12.176000 audit[2228]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.176000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffec5de580 a2=0 a3=1 items=0 ppid=2095 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.176000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:30:12.179000 audit[2231]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.179000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffde1d4fb0 a2=0 a3=1 items=0 ppid=2095 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.179000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:30:12.180000 audit[2232]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.180000 audit[2232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff631faf0 a2=0 a3=1 items=0 ppid=2095 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.180000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:30:12.182000 audit[2234]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.182000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffdc772340 a2=0 a3=1 items=0 ppid=2095 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.182000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:30:12.183000 audit[2235]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.183000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffec6abdb0 a2=0 a3=1 items=0 ppid=2095 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.183000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:30:12.185000 audit[2237]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.185000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd7586cb0 a2=0 a3=1 items=0 ppid=2095 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.185000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:30:12.188000 audit[2240]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:30:12.188000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcc6eadd0 a2=0 a3=1 items=0 ppid=2095 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.188000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:30:12.191000 audit[2242]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:30:12.191000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffd90d3580 a2=0 a3=1 items=0 ppid=2095 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.191000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:12.191000 audit[2242]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:30:12.191000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffd90d3580 a2=0 a3=1 items=0 ppid=2095 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:12.191000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:12.493296 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3935590992.mount: Deactivated successfully. Jul 10 00:30:13.070264 env[1221]: time="2025-07-10T00:30:13.070209315Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:13.074793 env[1221]: time="2025-07-10T00:30:13.074750858Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:13.076253 env[1221]: time="2025-07-10T00:30:13.076224437Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:13.077828 env[1221]: time="2025-07-10T00:30:13.077794182Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:13.078550 env[1221]: time="2025-07-10T00:30:13.078523630Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 10 00:30:13.081219 env[1221]: time="2025-07-10T00:30:13.081184928Z" level=info msg="CreateContainer within sandbox \"1425f3650c9532b1b04b2d9434641056209f02c70f0cff4ad4cb182b43f53e23\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 00:30:13.091397 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1786467229.mount: Deactivated successfully. Jul 10 00:30:13.093603 env[1221]: time="2025-07-10T00:30:13.093548274Z" level=info msg="CreateContainer within sandbox \"1425f3650c9532b1b04b2d9434641056209f02c70f0cff4ad4cb182b43f53e23\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"ee2f7987822d1dd838ee114453ff4d9ec018ac024293bd0688565dc7bcecfa86\"" Jul 10 00:30:13.094132 env[1221]: time="2025-07-10T00:30:13.094108592Z" level=info msg="StartContainer for \"ee2f7987822d1dd838ee114453ff4d9ec018ac024293bd0688565dc7bcecfa86\"" Jul 10 00:30:13.109038 systemd[1]: Started cri-containerd-ee2f7987822d1dd838ee114453ff4d9ec018ac024293bd0688565dc7bcecfa86.scope. Jul 10 00:30:13.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.142824 kernel: kauditd_printk_skb: 315 callbacks suppressed Jul 10 00:30:13.142891 kernel: audit: type=1400 audit(1752107413.140:914): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147666 kernel: audit: type=1400 audit(1752107413.140:915): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147723 kernel: audit: type=1400 audit(1752107413.140:916): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.152543 kernel: audit: type=1400 audit(1752107413.140:917): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.152621 kernel: audit: type=1400 audit(1752107413.140:918): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.157541 kernel: audit: type=1400 audit(1752107413.140:919): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.157591 kernel: audit: type=1400 audit(1752107413.140:920): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.140000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.162169 kernel: audit: type=1400 audit(1752107413.140:921): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.162359 kernel: audit: type=1400 audit(1752107413.140:922): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.167479 kernel: audit: type=1400 audit(1752107413.141:923): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.141000 audit: BPF prog-id=117 op=LOAD Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2001 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:13.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565326637393837383232643164643833386565313134343533666634 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2001 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:13.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565326637393837383232643164643833386565313134343533666634 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.144000 audit: BPF prog-id=118 op=LOAD Jul 10 00:30:13.144000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2001 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:13.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565326637393837383232643164643833386565313134343533666634 Jul 10 00:30:13.147000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.147000 audit: BPF prog-id=119 op=LOAD Jul 10 00:30:13.147000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2001 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:13.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565326637393837383232643164643833386565313134343533666634 Jul 10 00:30:13.149000 audit: BPF prog-id=119 op=UNLOAD Jul 10 00:30:13.149000 audit: BPF prog-id=118 op=UNLOAD Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { perfmon } for pid=2251 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit[2251]: AVC avc: denied { bpf } for pid=2251 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:13.149000 audit: BPF prog-id=120 op=LOAD Jul 10 00:30:13.149000 audit[2251]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2001 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:13.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565326637393837383232643164643833386565313134343533666634 Jul 10 00:30:13.185673 env[1221]: time="2025-07-10T00:30:13.182463177Z" level=info msg="StartContainer for \"ee2f7987822d1dd838ee114453ff4d9ec018ac024293bd0688565dc7bcecfa86\" returns successfully" Jul 10 00:30:13.870413 kubelet[1946]: I0710 00:30:13.870262 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-h6t4r" podStartSLOduration=1.295765973 podStartE2EDuration="2.870247184s" podCreationTimestamp="2025-07-10 00:30:11 +0000 UTC" firstStartedPulling="2025-07-10 00:30:11.505295023 +0000 UTC m=+6.765497677" lastFinishedPulling="2025-07-10 00:30:13.079776234 +0000 UTC m=+8.339978888" observedRunningTime="2025-07-10 00:30:13.870065012 +0000 UTC m=+9.130267666" watchObservedRunningTime="2025-07-10 00:30:13.870247184 +0000 UTC m=+9.130449838" Jul 10 00:30:14.267923 kubelet[1946]: E0710 00:30:14.267707 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:14.860777 kubelet[1946]: E0710 00:30:14.860742 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:15.373195 systemd[1]: cri-containerd-ee2f7987822d1dd838ee114453ff4d9ec018ac024293bd0688565dc7bcecfa86.scope: Deactivated successfully. Jul 10 00:30:15.372000 audit: BPF prog-id=117 op=UNLOAD Jul 10 00:30:15.377000 audit: BPF prog-id=120 op=UNLOAD Jul 10 00:30:15.399821 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ee2f7987822d1dd838ee114453ff4d9ec018ac024293bd0688565dc7bcecfa86-rootfs.mount: Deactivated successfully. Jul 10 00:30:15.501196 env[1221]: time="2025-07-10T00:30:15.501150332Z" level=info msg="shim disconnected" id=ee2f7987822d1dd838ee114453ff4d9ec018ac024293bd0688565dc7bcecfa86 Jul 10 00:30:15.501658 env[1221]: time="2025-07-10T00:30:15.501636281Z" level=warning msg="cleaning up after shim disconnected" id=ee2f7987822d1dd838ee114453ff4d9ec018ac024293bd0688565dc7bcecfa86 namespace=k8s.io Jul 10 00:30:15.501725 env[1221]: time="2025-07-10T00:30:15.501711446Z" level=info msg="cleaning up dead shim" Jul 10 00:30:15.533778 env[1221]: time="2025-07-10T00:30:15.533733885Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:30:15Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2298 runtime=io.containerd.runc.v2\n" Jul 10 00:30:15.863124 kubelet[1946]: E0710 00:30:15.863089 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:15.863675 kubelet[1946]: I0710 00:30:15.863641 1946 scope.go:117] "RemoveContainer" containerID="ee2f7987822d1dd838ee114453ff4d9ec018ac024293bd0688565dc7bcecfa86" Jul 10 00:30:15.865791 env[1221]: time="2025-07-10T00:30:15.865732382Z" level=info msg="CreateContainer within sandbox \"1425f3650c9532b1b04b2d9434641056209f02c70f0cff4ad4cb182b43f53e23\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 10 00:30:15.885882 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2624826704.mount: Deactivated successfully. Jul 10 00:30:15.892603 env[1221]: time="2025-07-10T00:30:15.892556390Z" level=info msg="CreateContainer within sandbox \"1425f3650c9532b1b04b2d9434641056209f02c70f0cff4ad4cb182b43f53e23\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"9d21a4cf55fcada95609e8650da816313f7d6075634f332d7c8990a312f73ccb\"" Jul 10 00:30:15.893672 env[1221]: time="2025-07-10T00:30:15.893646815Z" level=info msg="StartContainer for \"9d21a4cf55fcada95609e8650da816313f7d6075634f332d7c8990a312f73ccb\"" Jul 10 00:30:15.908774 systemd[1]: Started cri-containerd-9d21a4cf55fcada95609e8650da816313f7d6075634f332d7c8990a312f73ccb.scope. Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit: BPF prog-id=121 op=LOAD Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2001 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:15.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964323161346366353566636164613935363039653836353064613831 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2001 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:15.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964323161346366353566636164613935363039653836353064613831 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit: BPF prog-id=122 op=LOAD Jul 10 00:30:15.960000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2001 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:15.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964323161346366353566636164613935363039653836353064613831 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.960000 audit: BPF prog-id=123 op=LOAD Jul 10 00:30:15.960000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2001 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:15.960000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964323161346366353566636164613935363039653836353064613831 Jul 10 00:30:15.961000 audit: BPF prog-id=123 op=UNLOAD Jul 10 00:30:15.961000 audit: BPF prog-id=122 op=UNLOAD Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { perfmon } for pid=2336 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit[2336]: AVC avc: denied { bpf } for pid=2336 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:15.961000 audit: BPF prog-id=124 op=LOAD Jul 10 00:30:15.961000 audit[2336]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2001 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:15.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964323161346366353566636164613935363039653836353064613831 Jul 10 00:30:15.978816 env[1221]: time="2025-07-10T00:30:15.978719674Z" level=info msg="StartContainer for \"9d21a4cf55fcada95609e8650da816313f7d6075634f332d7c8990a312f73ccb\" returns successfully" Jul 10 00:30:18.525184 sudo[1356]: pam_unix(sudo:session): session closed for user root Jul 10 00:30:18.523000 audit[1356]: USER_END pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:30:18.526084 kernel: kauditd_printk_skb: 106 callbacks suppressed Jul 10 00:30:18.526210 kernel: audit: type=1106 audit(1752107418.523:952): pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:30:18.523000 audit[1356]: CRED_DISP pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:30:18.530655 sshd[1353]: pam_unix(sshd:session): session closed for user core Jul 10 00:30:18.532094 kernel: audit: type=1104 audit(1752107418.523:953): pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:30:18.528000 audit[1353]: USER_END pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:18.532590 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 00:30:18.532767 systemd[1]: session-7.scope: Consumed 5.376s CPU time. Jul 10 00:30:18.533149 systemd-logind[1210]: Session 7 logged out. Waiting for processes to exit. Jul 10 00:30:18.533254 systemd[1]: sshd@6-10.0.0.46:22-10.0.0.1:48770.service: Deactivated successfully. Jul 10 00:30:18.534183 systemd-logind[1210]: Removed session 7. Jul 10 00:30:18.535716 kernel: audit: type=1106 audit(1752107418.528:954): pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:18.528000 audit[1353]: CRED_DISP pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:18.538582 kernel: audit: type=1104 audit(1752107418.528:955): pid=1353 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:18.538631 kernel: audit: type=1131 audit(1752107418.531:956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.46:22-10.0.0.1:48770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:18.531000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.46:22-10.0.0.1:48770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:20.024000 audit[2396]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:20.024000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc1f15190 a2=0 a3=1 items=0 ppid=2095 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:20.032122 kernel: audit: type=1325 audit(1752107420.024:957): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:20.032284 kernel: audit: type=1300 audit(1752107420.024:957): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc1f15190 a2=0 a3=1 items=0 ppid=2095 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:20.024000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:20.034352 kernel: audit: type=1327 audit(1752107420.024:957): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:20.035000 audit[2396]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:20.039366 kernel: audit: type=1325 audit(1752107420.035:958): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2396 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:20.039437 kernel: audit: type=1300 audit(1752107420.035:958): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc1f15190 a2=0 a3=1 items=0 ppid=2095 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:20.035000 audit[2396]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc1f15190 a2=0 a3=1 items=0 ppid=2095 pid=2396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:20.035000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:20.052000 audit[2398]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:20.052000 audit[2398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcf096370 a2=0 a3=1 items=0 ppid=2095 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:20.052000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:20.057000 audit[2398]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2398 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:20.057000 audit[2398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcf096370 a2=0 a3=1 items=0 ppid=2095 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:20.057000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:20.966791 update_engine[1213]: I0710 00:30:20.966367 1213 update_attempter.cc:509] Updating boot flags... Jul 10 00:30:24.827000 audit[2415]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:24.828353 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 00:30:24.828438 kernel: audit: type=1325 audit(1752107424.827:961): table=filter:93 family=2 entries=17 op=nft_register_rule pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:24.830329 kernel: audit: type=1300 audit(1752107424.827:961): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffff78ddf0 a2=0 a3=1 items=0 ppid=2095 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:24.827000 audit[2415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffff78ddf0 a2=0 a3=1 items=0 ppid=2095 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:24.827000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:24.836191 kernel: audit: type=1327 audit(1752107424.827:961): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:24.836273 kernel: audit: type=1325 audit(1752107424.834:962): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:24.834000 audit[2415]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2415 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:24.834000 audit[2415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffff78ddf0 a2=0 a3=1 items=0 ppid=2095 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:24.843107 kernel: audit: type=1300 audit(1752107424.834:962): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffff78ddf0 a2=0 a3=1 items=0 ppid=2095 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:24.843357 kernel: audit: type=1327 audit(1752107424.834:962): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:24.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:24.861631 systemd[1]: Created slice kubepods-besteffort-podaace03ba_e5f7_42b1_b732_27c9bf950b80.slice. Jul 10 00:30:24.871363 kernel: audit: type=1325 audit(1752107424.863:963): table=filter:95 family=2 entries=18 op=nft_register_rule pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:24.871452 kernel: audit: type=1300 audit(1752107424.863:963): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeaa0e740 a2=0 a3=1 items=0 ppid=2095 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:24.871500 kernel: audit: type=1327 audit(1752107424.863:963): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:24.863000 audit[2417]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:24.863000 audit[2417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffeaa0e740 a2=0 a3=1 items=0 ppid=2095 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:24.863000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:24.876000 audit[2417]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:24.876000 audit[2417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeaa0e740 a2=0 a3=1 items=0 ppid=2095 pid=2417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:24.876000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:24.880326 kernel: audit: type=1325 audit(1752107424.876:964): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2417 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:24.943543 kubelet[1946]: I0710 00:30:24.943506 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/aace03ba-e5f7-42b1-b732-27c9bf950b80-tigera-ca-bundle\") pod \"calico-typha-5544b44996-xfk6s\" (UID: \"aace03ba-e5f7-42b1-b732-27c9bf950b80\") " pod="calico-system/calico-typha-5544b44996-xfk6s" Jul 10 00:30:24.943979 kubelet[1946]: I0710 00:30:24.943959 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/aace03ba-e5f7-42b1-b732-27c9bf950b80-typha-certs\") pod \"calico-typha-5544b44996-xfk6s\" (UID: \"aace03ba-e5f7-42b1-b732-27c9bf950b80\") " pod="calico-system/calico-typha-5544b44996-xfk6s" Jul 10 00:30:24.944120 kubelet[1946]: I0710 00:30:24.944105 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dqksz\" (UniqueName: \"kubernetes.io/projected/aace03ba-e5f7-42b1-b732-27c9bf950b80-kube-api-access-dqksz\") pod \"calico-typha-5544b44996-xfk6s\" (UID: \"aace03ba-e5f7-42b1-b732-27c9bf950b80\") " pod="calico-system/calico-typha-5544b44996-xfk6s" Jul 10 00:30:25.165288 kubelet[1946]: E0710 00:30:25.165174 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:25.165728 env[1221]: time="2025-07-10T00:30:25.165688015Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5544b44996-xfk6s,Uid:aace03ba-e5f7-42b1-b732-27c9bf950b80,Namespace:calico-system,Attempt:0,}" Jul 10 00:30:25.185453 env[1221]: time="2025-07-10T00:30:25.185128957Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:25.185453 env[1221]: time="2025-07-10T00:30:25.185176718Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:25.185453 env[1221]: time="2025-07-10T00:30:25.185186759Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:25.189848 env[1221]: time="2025-07-10T00:30:25.186349601Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/fbe787579e27e6c860ab6ed7078b7a8765bf8c3163fa1b30e698c43c72315d6b pid=2430 runtime=io.containerd.runc.v2 Jul 10 00:30:25.206249 systemd[1]: Started cri-containerd-fbe787579e27e6c860ab6ed7078b7a8765bf8c3163fa1b30e698c43c72315d6b.scope. Jul 10 00:30:25.212573 systemd[1]: Created slice kubepods-besteffort-podd19d0b9a_8303_4896_be1e_e9a96596638e.slice. Jul 10 00:30:25.246057 kubelet[1946]: I0710 00:30:25.246005 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/d19d0b9a-8303-4896-be1e-e9a96596638e-cni-log-dir\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246057 kubelet[1946]: I0710 00:30:25.246055 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d19d0b9a-8303-4896-be1e-e9a96596638e-lib-modules\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246362 kubelet[1946]: I0710 00:30:25.246075 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/d19d0b9a-8303-4896-be1e-e9a96596638e-node-certs\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246362 kubelet[1946]: I0710 00:30:25.246091 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/d19d0b9a-8303-4896-be1e-e9a96596638e-var-run-calico\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246362 kubelet[1946]: I0710 00:30:25.246108 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/d19d0b9a-8303-4896-be1e-e9a96596638e-policysync\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246362 kubelet[1946]: I0710 00:30:25.246124 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zcpjq\" (UniqueName: \"kubernetes.io/projected/d19d0b9a-8303-4896-be1e-e9a96596638e-kube-api-access-zcpjq\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246362 kubelet[1946]: I0710 00:30:25.246143 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/d19d0b9a-8303-4896-be1e-e9a96596638e-cni-bin-dir\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246511 kubelet[1946]: I0710 00:30:25.246161 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/d19d0b9a-8303-4896-be1e-e9a96596638e-var-lib-calico\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246511 kubelet[1946]: I0710 00:30:25.246176 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/d19d0b9a-8303-4896-be1e-e9a96596638e-cni-net-dir\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246511 kubelet[1946]: I0710 00:30:25.246191 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/d19d0b9a-8303-4896-be1e-e9a96596638e-flexvol-driver-host\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246511 kubelet[1946]: I0710 00:30:25.246205 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d19d0b9a-8303-4896-be1e-e9a96596638e-xtables-lock\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.246511 kubelet[1946]: I0710 00:30:25.246224 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d19d0b9a-8303-4896-be1e-e9a96596638e-tigera-ca-bundle\") pod \"calico-node-l9jv8\" (UID: \"d19d0b9a-8303-4896-be1e-e9a96596638e\") " pod="calico-system/calico-node-l9jv8" Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.268000 audit: BPF prog-id=125 op=LOAD Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2430 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662653738373537396532376536633836306162366564373037386237 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2430 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662653738373537396532376536633836306162366564373037386237 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit: BPF prog-id=126 op=LOAD Jul 10 00:30:25.269000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2430 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662653738373537396532376536633836306162366564373037386237 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit: BPF prog-id=127 op=LOAD Jul 10 00:30:25.269000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2430 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662653738373537396532376536633836306162366564373037386237 Jul 10 00:30:25.269000 audit: BPF prog-id=127 op=UNLOAD Jul 10 00:30:25.269000 audit: BPF prog-id=126 op=UNLOAD Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { perfmon } for pid=2439 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit[2439]: AVC avc: denied { bpf } for pid=2439 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.269000 audit: BPF prog-id=128 op=LOAD Jul 10 00:30:25.269000 audit[2439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2430 pid=2439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6662653738373537396532376536633836306162366564373037386237 Jul 10 00:30:25.287913 env[1221]: time="2025-07-10T00:30:25.287866387Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-5544b44996-xfk6s,Uid:aace03ba-e5f7-42b1-b732-27c9bf950b80,Namespace:calico-system,Attempt:0,} returns sandbox id \"fbe787579e27e6c860ab6ed7078b7a8765bf8c3163fa1b30e698c43c72315d6b\"" Jul 10 00:30:25.288956 kubelet[1946]: E0710 00:30:25.288925 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:25.293785 env[1221]: time="2025-07-10T00:30:25.293742639Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 00:30:25.353044 kubelet[1946]: E0710 00:30:25.352949 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.353044 kubelet[1946]: W0710 00:30:25.352974 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.353044 kubelet[1946]: E0710 00:30:25.352998 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.353685 kubelet[1946]: E0710 00:30:25.353660 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.353685 kubelet[1946]: W0710 00:30:25.353681 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.353808 kubelet[1946]: E0710 00:30:25.353695 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.360991 kubelet[1946]: E0710 00:30:25.360953 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.360991 kubelet[1946]: W0710 00:30:25.360977 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.360991 kubelet[1946]: E0710 00:30:25.360997 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.498253 kubelet[1946]: E0710 00:30:25.498023 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tx2lp" podUID="dc1f8e65-fe86-487d-86ca-ba8db7978167" Jul 10 00:30:25.515171 env[1221]: time="2025-07-10T00:30:25.515118313Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-l9jv8,Uid:d19d0b9a-8303-4896-be1e-e9a96596638e,Namespace:calico-system,Attempt:0,}" Jul 10 00:30:25.533391 env[1221]: time="2025-07-10T00:30:25.532521702Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:25.533391 env[1221]: time="2025-07-10T00:30:25.532575263Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:25.533391 env[1221]: time="2025-07-10T00:30:25.532600824Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:25.533391 env[1221]: time="2025-07-10T00:30:25.532792271Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f3756a52c429ebb654653001aaa7ac0a08f0695619fc0c9b2df2f7dac706715d pid=2476 runtime=io.containerd.runc.v2 Jul 10 00:30:25.538287 kubelet[1946]: E0710 00:30:25.538130 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.538287 kubelet[1946]: W0710 00:30:25.538155 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.538287 kubelet[1946]: E0710 00:30:25.538175 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.538674 kubelet[1946]: E0710 00:30:25.538569 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.538674 kubelet[1946]: W0710 00:30:25.538582 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.538674 kubelet[1946]: E0710 00:30:25.538593 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.538969 kubelet[1946]: E0710 00:30:25.538843 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.538969 kubelet[1946]: W0710 00:30:25.538856 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.538969 kubelet[1946]: E0710 00:30:25.538866 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.539293 kubelet[1946]: E0710 00:30:25.539148 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.539293 kubelet[1946]: W0710 00:30:25.539165 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.539293 kubelet[1946]: E0710 00:30:25.539177 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.539588 kubelet[1946]: E0710 00:30:25.539486 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.539588 kubelet[1946]: W0710 00:30:25.539501 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.539588 kubelet[1946]: E0710 00:30:25.539510 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.539865 kubelet[1946]: E0710 00:30:25.539760 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.539865 kubelet[1946]: W0710 00:30:25.539778 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.539865 kubelet[1946]: E0710 00:30:25.539788 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.540157 kubelet[1946]: E0710 00:30:25.540050 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.540157 kubelet[1946]: W0710 00:30:25.540061 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.540157 kubelet[1946]: E0710 00:30:25.540071 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.540509 kubelet[1946]: E0710 00:30:25.540391 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.540509 kubelet[1946]: W0710 00:30:25.540404 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.540509 kubelet[1946]: E0710 00:30:25.540413 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.540782 kubelet[1946]: E0710 00:30:25.540667 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.540782 kubelet[1946]: W0710 00:30:25.540679 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.540782 kubelet[1946]: E0710 00:30:25.540696 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.541069 kubelet[1946]: E0710 00:30:25.540957 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.541069 kubelet[1946]: W0710 00:30:25.540974 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.541069 kubelet[1946]: E0710 00:30:25.540984 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.541344 kubelet[1946]: E0710 00:30:25.541225 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.541344 kubelet[1946]: W0710 00:30:25.541236 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.541344 kubelet[1946]: E0710 00:30:25.541249 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.542043 kubelet[1946]: E0710 00:30:25.541902 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.542043 kubelet[1946]: W0710 00:30:25.541917 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.542043 kubelet[1946]: E0710 00:30:25.541942 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.542369 kubelet[1946]: E0710 00:30:25.542222 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.542369 kubelet[1946]: W0710 00:30:25.542234 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.542369 kubelet[1946]: E0710 00:30:25.542245 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.542633 kubelet[1946]: E0710 00:30:25.542532 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.542633 kubelet[1946]: W0710 00:30:25.542546 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.542633 kubelet[1946]: E0710 00:30:25.542555 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.542882 kubelet[1946]: E0710 00:30:25.542786 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.542882 kubelet[1946]: W0710 00:30:25.542797 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.542882 kubelet[1946]: E0710 00:30:25.542812 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.543137 kubelet[1946]: E0710 00:30:25.543040 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.543137 kubelet[1946]: W0710 00:30:25.543050 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.543137 kubelet[1946]: E0710 00:30:25.543059 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.543324 kubelet[1946]: E0710 00:30:25.543301 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.543431 kubelet[1946]: W0710 00:30:25.543416 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.543500 kubelet[1946]: E0710 00:30:25.543486 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.543710 kubelet[1946]: E0710 00:30:25.543698 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.543779 kubelet[1946]: W0710 00:30:25.543767 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.543844 kubelet[1946]: E0710 00:30:25.543832 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.544049 kubelet[1946]: E0710 00:30:25.544038 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.544131 kubelet[1946]: W0710 00:30:25.544119 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.544190 kubelet[1946]: E0710 00:30:25.544178 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.544760 kubelet[1946]: E0710 00:30:25.544744 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.544842 kubelet[1946]: W0710 00:30:25.544828 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.544898 kubelet[1946]: E0710 00:30:25.544887 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.547517 systemd[1]: Started cri-containerd-f3756a52c429ebb654653001aaa7ac0a08f0695619fc0c9b2df2f7dac706715d.scope. Jul 10 00:30:25.549543 kubelet[1946]: E0710 00:30:25.549507 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.549703 kubelet[1946]: W0710 00:30:25.549644 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.549703 kubelet[1946]: E0710 00:30:25.549668 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.549891 kubelet[1946]: I0710 00:30:25.549801 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-254hp\" (UniqueName: \"kubernetes.io/projected/dc1f8e65-fe86-487d-86ca-ba8db7978167-kube-api-access-254hp\") pod \"csi-node-driver-tx2lp\" (UID: \"dc1f8e65-fe86-487d-86ca-ba8db7978167\") " pod="calico-system/csi-node-driver-tx2lp" Jul 10 00:30:25.550256 kubelet[1946]: E0710 00:30:25.550167 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.550256 kubelet[1946]: W0710 00:30:25.550183 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.550256 kubelet[1946]: E0710 00:30:25.550194 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.550256 kubelet[1946]: I0710 00:30:25.550211 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/dc1f8e65-fe86-487d-86ca-ba8db7978167-kubelet-dir\") pod \"csi-node-driver-tx2lp\" (UID: \"dc1f8e65-fe86-487d-86ca-ba8db7978167\") " pod="calico-system/csi-node-driver-tx2lp" Jul 10 00:30:25.550813 kubelet[1946]: E0710 00:30:25.550677 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.550813 kubelet[1946]: W0710 00:30:25.550693 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.550813 kubelet[1946]: E0710 00:30:25.550705 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.550813 kubelet[1946]: I0710 00:30:25.550724 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/dc1f8e65-fe86-487d-86ca-ba8db7978167-registration-dir\") pod \"csi-node-driver-tx2lp\" (UID: \"dc1f8e65-fe86-487d-86ca-ba8db7978167\") " pod="calico-system/csi-node-driver-tx2lp" Jul 10 00:30:25.551117 kubelet[1946]: E0710 00:30:25.550995 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.551117 kubelet[1946]: W0710 00:30:25.551008 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.551117 kubelet[1946]: E0710 00:30:25.551020 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.551117 kubelet[1946]: I0710 00:30:25.551036 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/dc1f8e65-fe86-487d-86ca-ba8db7978167-socket-dir\") pod \"csi-node-driver-tx2lp\" (UID: \"dc1f8e65-fe86-487d-86ca-ba8db7978167\") " pod="calico-system/csi-node-driver-tx2lp" Jul 10 00:30:25.551552 kubelet[1946]: E0710 00:30:25.551396 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.551552 kubelet[1946]: W0710 00:30:25.551411 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.551552 kubelet[1946]: E0710 00:30:25.551428 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.551552 kubelet[1946]: I0710 00:30:25.551450 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/dc1f8e65-fe86-487d-86ca-ba8db7978167-varrun\") pod \"csi-node-driver-tx2lp\" (UID: \"dc1f8e65-fe86-487d-86ca-ba8db7978167\") " pod="calico-system/csi-node-driver-tx2lp" Jul 10 00:30:25.551871 kubelet[1946]: E0710 00:30:25.551776 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.551871 kubelet[1946]: W0710 00:30:25.551791 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.551871 kubelet[1946]: E0710 00:30:25.551802 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.552458 kubelet[1946]: E0710 00:30:25.552181 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.552458 kubelet[1946]: W0710 00:30:25.552196 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.552458 kubelet[1946]: E0710 00:30:25.552207 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.554916 kubelet[1946]: E0710 00:30:25.554782 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.554916 kubelet[1946]: W0710 00:30:25.554801 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.554916 kubelet[1946]: E0710 00:30:25.554825 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.555218 kubelet[1946]: E0710 00:30:25.555117 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.555218 kubelet[1946]: W0710 00:30:25.555135 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.555218 kubelet[1946]: E0710 00:30:25.555165 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.555500 kubelet[1946]: E0710 00:30:25.555432 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.555500 kubelet[1946]: W0710 00:30:25.555446 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.555649 kubelet[1946]: E0710 00:30:25.555606 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.555824 kubelet[1946]: E0710 00:30:25.555743 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.555824 kubelet[1946]: W0710 00:30:25.555754 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.555824 kubelet[1946]: E0710 00:30:25.555794 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.556068 kubelet[1946]: E0710 00:30:25.555982 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.556068 kubelet[1946]: W0710 00:30:25.555994 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.556068 kubelet[1946]: E0710 00:30:25.556034 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.556391 kubelet[1946]: E0710 00:30:25.556209 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.556391 kubelet[1946]: W0710 00:30:25.556221 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.556391 kubelet[1946]: E0710 00:30:25.556231 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.556683 kubelet[1946]: E0710 00:30:25.556570 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.556683 kubelet[1946]: W0710 00:30:25.556584 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.556683 kubelet[1946]: E0710 00:30:25.556595 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.556862 kubelet[1946]: E0710 00:30:25.556849 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.556926 kubelet[1946]: W0710 00:30:25.556914 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.556998 kubelet[1946]: E0710 00:30:25.556986 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.621000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.621000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit: BPF prog-id=129 op=LOAD Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2476 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633373536613532633432396562623635343635333030316161613761 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2476 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633373536613532633432396562623635343635333030316161613761 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit: BPF prog-id=130 op=LOAD Jul 10 00:30:25.622000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2476 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633373536613532633432396562623635343635333030316161613761 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.622000 audit: BPF prog-id=131 op=LOAD Jul 10 00:30:25.622000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2476 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.622000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633373536613532633432396562623635343635333030316161613761 Jul 10 00:30:25.623000 audit: BPF prog-id=131 op=UNLOAD Jul 10 00:30:25.623000 audit: BPF prog-id=130 op=UNLOAD Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { perfmon } for pid=2486 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit[2486]: AVC avc: denied { bpf } for pid=2486 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:25.623000 audit: BPF prog-id=132 op=LOAD Jul 10 00:30:25.623000 audit[2486]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2476 pid=2486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.623000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633373536613532633432396562623635343635333030316161613761 Jul 10 00:30:25.639626 env[1221]: time="2025-07-10T00:30:25.639566247Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-l9jv8,Uid:d19d0b9a-8303-4896-be1e-e9a96596638e,Namespace:calico-system,Attempt:0,} returns sandbox id \"f3756a52c429ebb654653001aaa7ac0a08f0695619fc0c9b2df2f7dac706715d\"" Jul 10 00:30:25.655354 kubelet[1946]: E0710 00:30:25.652607 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.655354 kubelet[1946]: W0710 00:30:25.652629 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.655354 kubelet[1946]: E0710 00:30:25.652650 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.655354 kubelet[1946]: E0710 00:30:25.653044 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.655354 kubelet[1946]: W0710 00:30:25.653057 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.655354 kubelet[1946]: E0710 00:30:25.653070 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.655354 kubelet[1946]: E0710 00:30:25.653246 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.655354 kubelet[1946]: W0710 00:30:25.653257 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.655354 kubelet[1946]: E0710 00:30:25.653267 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.655835 kubelet[1946]: E0710 00:30:25.655808 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.655835 kubelet[1946]: W0710 00:30:25.655825 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.656014 kubelet[1946]: E0710 00:30:25.655947 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.656014 kubelet[1946]: E0710 00:30:25.656012 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.656106 kubelet[1946]: W0710 00:30:25.656020 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.656106 kubelet[1946]: E0710 00:30:25.656065 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.656690 kubelet[1946]: E0710 00:30:25.656672 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.656690 kubelet[1946]: W0710 00:30:25.656687 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.656850 kubelet[1946]: E0710 00:30:25.656745 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.656929 kubelet[1946]: E0710 00:30:25.656888 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.656929 kubelet[1946]: W0710 00:30:25.656900 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.657009 kubelet[1946]: E0710 00:30:25.656930 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.657133 kubelet[1946]: E0710 00:30:25.657120 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.657133 kubelet[1946]: W0710 00:30:25.657132 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.657208 kubelet[1946]: E0710 00:30:25.657149 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.657360 kubelet[1946]: E0710 00:30:25.657348 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.657360 kubelet[1946]: W0710 00:30:25.657360 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.657421 kubelet[1946]: E0710 00:30:25.657381 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.657524 kubelet[1946]: E0710 00:30:25.657514 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.657524 kubelet[1946]: W0710 00:30:25.657523 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.657590 kubelet[1946]: E0710 00:30:25.657542 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.657687 kubelet[1946]: E0710 00:30:25.657675 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.657687 kubelet[1946]: W0710 00:30:25.657685 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.657758 kubelet[1946]: E0710 00:30:25.657704 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.657847 kubelet[1946]: E0710 00:30:25.657836 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.657847 kubelet[1946]: W0710 00:30:25.657845 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.657905 kubelet[1946]: E0710 00:30:25.657860 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.658000 kubelet[1946]: E0710 00:30:25.657990 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.658000 kubelet[1946]: W0710 00:30:25.657999 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.658047 kubelet[1946]: E0710 00:30:25.658010 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.658370 kubelet[1946]: E0710 00:30:25.658353 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.658409 kubelet[1946]: W0710 00:30:25.658371 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.658409 kubelet[1946]: E0710 00:30:25.658391 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.658567 kubelet[1946]: E0710 00:30:25.658555 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.658567 kubelet[1946]: W0710 00:30:25.658566 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.658680 kubelet[1946]: E0710 00:30:25.658668 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.658757 kubelet[1946]: E0710 00:30:25.658748 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.658784 kubelet[1946]: W0710 00:30:25.658757 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.658842 kubelet[1946]: E0710 00:30:25.658831 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.658909 kubelet[1946]: E0710 00:30:25.658900 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.658935 kubelet[1946]: W0710 00:30:25.658909 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.658990 kubelet[1946]: E0710 00:30:25.658979 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.659074 kubelet[1946]: E0710 00:30:25.659065 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.659097 kubelet[1946]: W0710 00:30:25.659074 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.659213 kubelet[1946]: E0710 00:30:25.659165 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.659260 kubelet[1946]: E0710 00:30:25.659250 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.659260 kubelet[1946]: W0710 00:30:25.659259 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.659341 kubelet[1946]: E0710 00:30:25.659281 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.659488 kubelet[1946]: E0710 00:30:25.659476 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.659531 kubelet[1946]: W0710 00:30:25.659488 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.659531 kubelet[1946]: E0710 00:30:25.659500 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.659656 kubelet[1946]: E0710 00:30:25.659645 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.659683 kubelet[1946]: W0710 00:30:25.659656 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.659683 kubelet[1946]: E0710 00:30:25.659667 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.659806 kubelet[1946]: E0710 00:30:25.659795 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.659834 kubelet[1946]: W0710 00:30:25.659805 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.659834 kubelet[1946]: E0710 00:30:25.659813 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.659987 kubelet[1946]: E0710 00:30:25.659973 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.659987 kubelet[1946]: W0710 00:30:25.659986 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.660046 kubelet[1946]: E0710 00:30:25.659996 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.660143 kubelet[1946]: E0710 00:30:25.660132 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.660143 kubelet[1946]: W0710 00:30:25.660142 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.660199 kubelet[1946]: E0710 00:30:25.660151 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.660792 kubelet[1946]: E0710 00:30:25.660753 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.660792 kubelet[1946]: W0710 00:30:25.660778 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.660862 kubelet[1946]: E0710 00:30:25.660795 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.703642 kubelet[1946]: E0710 00:30:25.703607 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:25.703642 kubelet[1946]: W0710 00:30:25.703634 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:25.703896 kubelet[1946]: E0710 00:30:25.703655 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:25.891000 audit[2572]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2572 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:25.891000 audit[2572]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffe033de90 a2=0 a3=1 items=0 ppid=2095 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.891000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:25.903000 audit[2572]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2572 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:25.903000 audit[2572]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe033de90 a2=0 a3=1 items=0 ppid=2095 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:25.903000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:26.348412 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4025895245.mount: Deactivated successfully. Jul 10 00:30:26.829927 kubelet[1946]: E0710 00:30:26.829874 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tx2lp" podUID="dc1f8e65-fe86-487d-86ca-ba8db7978167" Jul 10 00:30:27.308278 env[1221]: time="2025-07-10T00:30:27.308163761Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:27.309982 env[1221]: time="2025-07-10T00:30:27.309951220Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:27.311801 env[1221]: time="2025-07-10T00:30:27.311765320Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:27.313994 env[1221]: time="2025-07-10T00:30:27.313964192Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:27.314453 env[1221]: time="2025-07-10T00:30:27.314423127Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 10 00:30:27.316616 env[1221]: time="2025-07-10T00:30:27.316583478Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 00:30:27.335302 env[1221]: time="2025-07-10T00:30:27.335243653Z" level=info msg="CreateContainer within sandbox \"fbe787579e27e6c860ab6ed7078b7a8765bf8c3163fa1b30e698c43c72315d6b\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 00:30:27.347697 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1383367628.mount: Deactivated successfully. Jul 10 00:30:27.350791 env[1221]: time="2025-07-10T00:30:27.350746243Z" level=info msg="CreateContainer within sandbox \"fbe787579e27e6c860ab6ed7078b7a8765bf8c3163fa1b30e698c43c72315d6b\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"a7793f56b60cccb46f3b811e72ef29557f51af438eb5d772a11db646c65972b5\"" Jul 10 00:30:27.353817 env[1221]: time="2025-07-10T00:30:27.352427619Z" level=info msg="StartContainer for \"a7793f56b60cccb46f3b811e72ef29557f51af438eb5d772a11db646c65972b5\"" Jul 10 00:30:27.377633 systemd[1]: Started cri-containerd-a7793f56b60cccb46f3b811e72ef29557f51af438eb5d772a11db646c65972b5.scope. Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.412000 audit: BPF prog-id=133 op=LOAD Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2430 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:27.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373933663536623630636363623436663362383131653732656632 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2430 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:27.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373933663536623630636363623436663362383131653732656632 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit: BPF prog-id=134 op=LOAD Jul 10 00:30:27.413000 audit[2582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2430 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:27.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373933663536623630636363623436663362383131653732656632 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.413000 audit: BPF prog-id=135 op=LOAD Jul 10 00:30:27.413000 audit[2582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2430 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:27.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373933663536623630636363623436663362383131653732656632 Jul 10 00:30:27.414000 audit: BPF prog-id=135 op=UNLOAD Jul 10 00:30:27.414000 audit: BPF prog-id=134 op=UNLOAD Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { perfmon } for pid=2582 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit[2582]: AVC avc: denied { bpf } for pid=2582 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:27.414000 audit: BPF prog-id=136 op=LOAD Jul 10 00:30:27.414000 audit[2582]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2430 pid=2582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:27.414000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6137373933663536623630636363623436663362383131653732656632 Jul 10 00:30:27.450550 env[1221]: time="2025-07-10T00:30:27.450498568Z" level=info msg="StartContainer for \"a7793f56b60cccb46f3b811e72ef29557f51af438eb5d772a11db646c65972b5\" returns successfully" Jul 10 00:30:27.890260 kubelet[1946]: E0710 00:30:27.890218 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:27.915012 kubelet[1946]: I0710 00:30:27.914948 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-5544b44996-xfk6s" podStartSLOduration=1.89066369 podStartE2EDuration="3.914928742s" podCreationTimestamp="2025-07-10 00:30:24 +0000 UTC" firstStartedPulling="2025-07-10 00:30:25.292175582 +0000 UTC m=+20.552378236" lastFinishedPulling="2025-07-10 00:30:27.316440634 +0000 UTC m=+22.576643288" observedRunningTime="2025-07-10 00:30:27.913256887 +0000 UTC m=+23.173459541" watchObservedRunningTime="2025-07-10 00:30:27.914928742 +0000 UTC m=+23.175131396" Jul 10 00:30:27.963771 kubelet[1946]: E0710 00:30:27.963733 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.963771 kubelet[1946]: W0710 00:30:27.963755 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.964029 kubelet[1946]: E0710 00:30:27.963783 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.964029 kubelet[1946]: E0710 00:30:27.963923 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.964029 kubelet[1946]: W0710 00:30:27.963941 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.964029 kubelet[1946]: E0710 00:30:27.963951 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.964138 kubelet[1946]: E0710 00:30:27.964102 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.964138 kubelet[1946]: W0710 00:30:27.964115 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.964138 kubelet[1946]: E0710 00:30:27.964123 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.964288 kubelet[1946]: E0710 00:30:27.964251 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.964288 kubelet[1946]: W0710 00:30:27.964269 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.964288 kubelet[1946]: E0710 00:30:27.964278 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.964571 kubelet[1946]: E0710 00:30:27.964541 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.964571 kubelet[1946]: W0710 00:30:27.964557 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.964571 kubelet[1946]: E0710 00:30:27.964568 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.964754 kubelet[1946]: E0710 00:30:27.964729 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.964754 kubelet[1946]: W0710 00:30:27.964742 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.964754 kubelet[1946]: E0710 00:30:27.964750 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.964883 kubelet[1946]: E0710 00:30:27.964871 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.964915 kubelet[1946]: W0710 00:30:27.964879 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.964915 kubelet[1946]: E0710 00:30:27.964893 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.965029 kubelet[1946]: E0710 00:30:27.965015 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.965066 kubelet[1946]: W0710 00:30:27.965030 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.965066 kubelet[1946]: E0710 00:30:27.965039 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.965410 kubelet[1946]: E0710 00:30:27.965393 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.965478 kubelet[1946]: W0710 00:30:27.965407 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.965478 kubelet[1946]: E0710 00:30:27.965423 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.965591 kubelet[1946]: E0710 00:30:27.965577 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.965625 kubelet[1946]: W0710 00:30:27.965600 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.965625 kubelet[1946]: E0710 00:30:27.965610 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.965825 kubelet[1946]: E0710 00:30:27.965803 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.965825 kubelet[1946]: W0710 00:30:27.965814 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.965825 kubelet[1946]: E0710 00:30:27.965821 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.965991 kubelet[1946]: E0710 00:30:27.965972 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.965991 kubelet[1946]: W0710 00:30:27.965983 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.965991 kubelet[1946]: E0710 00:30:27.965992 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.966160 kubelet[1946]: E0710 00:30:27.966146 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.966160 kubelet[1946]: W0710 00:30:27.966157 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.966220 kubelet[1946]: E0710 00:30:27.966171 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.966608 kubelet[1946]: E0710 00:30:27.966575 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.966608 kubelet[1946]: W0710 00:30:27.966592 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.966683 kubelet[1946]: E0710 00:30:27.966604 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.966896 kubelet[1946]: E0710 00:30:27.966877 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.966896 kubelet[1946]: W0710 00:30:27.966891 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.966964 kubelet[1946]: E0710 00:30:27.966902 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.974176 kubelet[1946]: E0710 00:30:27.974144 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.974176 kubelet[1946]: W0710 00:30:27.974163 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.974176 kubelet[1946]: E0710 00:30:27.974178 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.974539 kubelet[1946]: E0710 00:30:27.974514 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.974539 kubelet[1946]: W0710 00:30:27.974531 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.974611 kubelet[1946]: E0710 00:30:27.974544 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.974786 kubelet[1946]: E0710 00:30:27.974765 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.974786 kubelet[1946]: W0710 00:30:27.974778 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.974865 kubelet[1946]: E0710 00:30:27.974793 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.975218 kubelet[1946]: E0710 00:30:27.975190 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.975218 kubelet[1946]: W0710 00:30:27.975210 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.975295 kubelet[1946]: E0710 00:30:27.975227 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.975548 kubelet[1946]: E0710 00:30:27.975519 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.975548 kubelet[1946]: W0710 00:30:27.975539 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.975641 kubelet[1946]: E0710 00:30:27.975620 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.975982 kubelet[1946]: E0710 00:30:27.975960 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.975982 kubelet[1946]: W0710 00:30:27.975975 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.976042 kubelet[1946]: E0710 00:30:27.976027 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.976250 kubelet[1946]: E0710 00:30:27.976234 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.976276 kubelet[1946]: W0710 00:30:27.976251 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.976332 kubelet[1946]: E0710 00:30:27.976301 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.976462 kubelet[1946]: E0710 00:30:27.976450 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.976494 kubelet[1946]: W0710 00:30:27.976463 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.976494 kubelet[1946]: E0710 00:30:27.976478 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.977475 kubelet[1946]: E0710 00:30:27.977398 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.977475 kubelet[1946]: W0710 00:30:27.977469 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.977545 kubelet[1946]: E0710 00:30:27.977527 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.978131 kubelet[1946]: E0710 00:30:27.978104 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.978131 kubelet[1946]: W0710 00:30:27.978125 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.978200 kubelet[1946]: E0710 00:30:27.978174 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.978527 kubelet[1946]: E0710 00:30:27.978455 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.978564 kubelet[1946]: W0710 00:30:27.978525 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.978898 kubelet[1946]: E0710 00:30:27.978862 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.979047 kubelet[1946]: E0710 00:30:27.979032 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.979047 kubelet[1946]: W0710 00:30:27.979046 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.979116 kubelet[1946]: E0710 00:30:27.979061 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.979268 kubelet[1946]: E0710 00:30:27.979253 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.979302 kubelet[1946]: W0710 00:30:27.979268 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.979302 kubelet[1946]: E0710 00:30:27.979281 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.981676 kubelet[1946]: E0710 00:30:27.981654 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.981676 kubelet[1946]: W0710 00:30:27.981673 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.981799 kubelet[1946]: E0710 00:30:27.981694 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.982430 kubelet[1946]: E0710 00:30:27.982403 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.982485 kubelet[1946]: W0710 00:30:27.982430 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.982485 kubelet[1946]: E0710 00:30:27.982446 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.982642 kubelet[1946]: E0710 00:30:27.982629 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.982642 kubelet[1946]: W0710 00:30:27.982641 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.982704 kubelet[1946]: E0710 00:30:27.982655 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.988137 kubelet[1946]: E0710 00:30:27.987602 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.988137 kubelet[1946]: W0710 00:30:27.987626 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.988137 kubelet[1946]: E0710 00:30:27.987646 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:27.988137 kubelet[1946]: E0710 00:30:27.987827 1946 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:30:27.988137 kubelet[1946]: W0710 00:30:27.987834 1946 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:30:27.988137 kubelet[1946]: E0710 00:30:27.987842 1946 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:30:28.177761 env[1221]: time="2025-07-10T00:30:28.177626497Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:28.180994 env[1221]: time="2025-07-10T00:30:28.180948641Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:28.182748 env[1221]: time="2025-07-10T00:30:28.182715777Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:28.184060 env[1221]: time="2025-07-10T00:30:28.184027218Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:28.184729 env[1221]: time="2025-07-10T00:30:28.184691399Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 10 00:30:28.188774 env[1221]: time="2025-07-10T00:30:28.188734726Z" level=info msg="CreateContainer within sandbox \"f3756a52c429ebb654653001aaa7ac0a08f0695619fc0c9b2df2f7dac706715d\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 00:30:28.205281 env[1221]: time="2025-07-10T00:30:28.205232806Z" level=info msg="CreateContainer within sandbox \"f3756a52c429ebb654653001aaa7ac0a08f0695619fc0c9b2df2f7dac706715d\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"bf55032cd9f555033c00818ac1b28e1b75ef672b85f496eee5f2743437f24836\"" Jul 10 00:30:28.205965 env[1221]: time="2025-07-10T00:30:28.205937628Z" level=info msg="StartContainer for \"bf55032cd9f555033c00818ac1b28e1b75ef672b85f496eee5f2743437f24836\"" Jul 10 00:30:28.224475 systemd[1]: Started cri-containerd-bf55032cd9f555033c00818ac1b28e1b75ef672b85f496eee5f2743437f24836.scope. Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2476 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:28.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266353530333263643966353535303333633030383138616331623238 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit: BPF prog-id=137 op=LOAD Jul 10 00:30:28.258000 audit[2656]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2476 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:28.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266353530333263643966353535303333633030383138616331623238 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit: BPF prog-id=138 op=LOAD Jul 10 00:30:28.258000 audit[2656]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2476 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:28.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266353530333263643966353535303333633030383138616331623238 Jul 10 00:30:28.258000 audit: BPF prog-id=138 op=UNLOAD Jul 10 00:30:28.258000 audit: BPF prog-id=137 op=UNLOAD Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { perfmon } for pid=2656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit[2656]: AVC avc: denied { bpf } for pid=2656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:28.258000 audit: BPF prog-id=139 op=LOAD Jul 10 00:30:28.258000 audit[2656]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2476 pid=2656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:28.258000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266353530333263643966353535303333633030383138616331623238 Jul 10 00:30:28.284532 env[1221]: time="2025-07-10T00:30:28.284475381Z" level=info msg="StartContainer for \"bf55032cd9f555033c00818ac1b28e1b75ef672b85f496eee5f2743437f24836\" returns successfully" Jul 10 00:30:28.309739 systemd[1]: cri-containerd-bf55032cd9f555033c00818ac1b28e1b75ef672b85f496eee5f2743437f24836.scope: Deactivated successfully. Jul 10 00:30:28.314000 audit: BPF prog-id=139 op=UNLOAD Jul 10 00:30:28.335374 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bf55032cd9f555033c00818ac1b28e1b75ef672b85f496eee5f2743437f24836-rootfs.mount: Deactivated successfully. Jul 10 00:30:28.347703 env[1221]: time="2025-07-10T00:30:28.347655410Z" level=info msg="shim disconnected" id=bf55032cd9f555033c00818ac1b28e1b75ef672b85f496eee5f2743437f24836 Jul 10 00:30:28.347703 env[1221]: time="2025-07-10T00:30:28.347703612Z" level=warning msg="cleaning up after shim disconnected" id=bf55032cd9f555033c00818ac1b28e1b75ef672b85f496eee5f2743437f24836 namespace=k8s.io Jul 10 00:30:28.348123 env[1221]: time="2025-07-10T00:30:28.347715572Z" level=info msg="cleaning up dead shim" Jul 10 00:30:28.355981 env[1221]: time="2025-07-10T00:30:28.355927311Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:30:28Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2696 runtime=io.containerd.runc.v2\n" Jul 10 00:30:28.830556 kubelet[1946]: E0710 00:30:28.830493 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tx2lp" podUID="dc1f8e65-fe86-487d-86ca-ba8db7978167" Jul 10 00:30:28.891213 kubelet[1946]: I0710 00:30:28.891168 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:30:28.891584 kubelet[1946]: E0710 00:30:28.891463 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:28.893390 env[1221]: time="2025-07-10T00:30:28.893338632Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 00:30:30.830417 kubelet[1946]: E0710 00:30:30.830040 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-tx2lp" podUID="dc1f8e65-fe86-487d-86ca-ba8db7978167" Jul 10 00:30:31.393977 env[1221]: time="2025-07-10T00:30:31.393887136Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:31.419588 env[1221]: time="2025-07-10T00:30:31.419536566Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:31.423870 env[1221]: time="2025-07-10T00:30:31.423837565Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:31.425557 env[1221]: time="2025-07-10T00:30:31.425494251Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:31.427989 env[1221]: time="2025-07-10T00:30:31.427951399Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 10 00:30:31.430148 env[1221]: time="2025-07-10T00:30:31.430102018Z" level=info msg="CreateContainer within sandbox \"f3756a52c429ebb654653001aaa7ac0a08f0695619fc0c9b2df2f7dac706715d\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 00:30:31.445112 env[1221]: time="2025-07-10T00:30:31.445035512Z" level=info msg="CreateContainer within sandbox \"f3756a52c429ebb654653001aaa7ac0a08f0695619fc0c9b2df2f7dac706715d\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"9e24be454fb19078a86cf255226fbacbca2459394283ab1cdef7ca6f0a9415d6\"" Jul 10 00:30:31.445906 env[1221]: time="2025-07-10T00:30:31.445827134Z" level=info msg="StartContainer for \"9e24be454fb19078a86cf255226fbacbca2459394283ab1cdef7ca6f0a9415d6\"" Jul 10 00:30:31.465348 systemd[1]: Started cri-containerd-9e24be454fb19078a86cf255226fbacbca2459394283ab1cdef7ca6f0a9415d6.scope. Jul 10 00:30:31.506000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510427 kernel: kauditd_printk_skb: 223 callbacks suppressed Jul 10 00:30:31.510608 kernel: audit: type=1400 audit(1752107431.506:1028): avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510644 kernel: audit: type=1300 audit(1752107431.506:1028): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2476 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:31.506000 audit[2721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2476 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:31.506000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323462653435346662313930373861383663663235353232366662 Jul 10 00:30:31.517003 kernel: audit: type=1327 audit(1752107431.506:1028): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323462653435346662313930373861383663663235353232366662 Jul 10 00:30:31.517089 kernel: audit: type=1400 audit(1752107431.510:1029): avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.519316 kernel: audit: type=1400 audit(1752107431.510:1029): avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.523998 kernel: audit: type=1400 audit(1752107431.510:1029): avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.526919 kernel: audit: type=1400 audit(1752107431.510:1029): avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.527016 kernel: audit: type=1400 audit(1752107431.510:1029): avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.532212 kernel: audit: type=1400 audit(1752107431.510:1029): avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.534678 kernel: audit: type=1400 audit(1752107431.510:1029): avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.510000 audit: BPF prog-id=140 op=LOAD Jul 10 00:30:31.510000 audit[2721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2476 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:31.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323462653435346662313930373861383663663235353232366662 Jul 10 00:30:31.512000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.512000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.512000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.512000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.512000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.512000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.512000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.512000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.512000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.512000 audit: BPF prog-id=141 op=LOAD Jul 10 00:30:31.512000 audit[2721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2476 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:31.512000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323462653435346662313930373861383663663235353232366662 Jul 10 00:30:31.515000 audit: BPF prog-id=141 op=UNLOAD Jul 10 00:30:31.515000 audit: BPF prog-id=140 op=UNLOAD Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { perfmon } for pid=2721 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit[2721]: AVC avc: denied { bpf } for pid=2721 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:31.515000 audit: BPF prog-id=142 op=LOAD Jul 10 00:30:31.515000 audit[2721]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2476 pid=2721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:31.515000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965323462653435346662313930373861383663663235353232366662 Jul 10 00:30:31.591840 env[1221]: time="2025-07-10T00:30:31.591775813Z" level=info msg="StartContainer for \"9e24be454fb19078a86cf255226fbacbca2459394283ab1cdef7ca6f0a9415d6\" returns successfully" Jul 10 00:30:32.253603 env[1221]: time="2025-07-10T00:30:32.253534326Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:30:32.256366 systemd[1]: cri-containerd-9e24be454fb19078a86cf255226fbacbca2459394283ab1cdef7ca6f0a9415d6.scope: Deactivated successfully. Jul 10 00:30:32.260000 audit: BPF prog-id=142 op=UNLOAD Jul 10 00:30:32.273170 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9e24be454fb19078a86cf255226fbacbca2459394283ab1cdef7ca6f0a9415d6-rootfs.mount: Deactivated successfully. Jul 10 00:30:32.274530 kubelet[1946]: I0710 00:30:32.274505 1946 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 10 00:30:32.332788 env[1221]: time="2025-07-10T00:30:32.332735390Z" level=info msg="shim disconnected" id=9e24be454fb19078a86cf255226fbacbca2459394283ab1cdef7ca6f0a9415d6 Jul 10 00:30:32.332788 env[1221]: time="2025-07-10T00:30:32.332782631Z" level=warning msg="cleaning up after shim disconnected" id=9e24be454fb19078a86cf255226fbacbca2459394283ab1cdef7ca6f0a9415d6 namespace=k8s.io Jul 10 00:30:32.332788 env[1221]: time="2025-07-10T00:30:32.332791951Z" level=info msg="cleaning up dead shim" Jul 10 00:30:32.344660 env[1221]: time="2025-07-10T00:30:32.344602945Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:30:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2761 runtime=io.containerd.runc.v2\n" Jul 10 00:30:32.357867 systemd[1]: Created slice kubepods-burstable-pod6b79d55d_2c8d_4e37_bf85_cf4cb2ccf095.slice. Jul 10 00:30:32.363186 systemd[1]: Created slice kubepods-burstable-podd96ad5bd_2619_4aae_87cf_4a850e4349ff.slice. Jul 10 00:30:32.370010 systemd[1]: Created slice kubepods-besteffort-pod5e8aa6f5_da0d_40d1_a391_88634bd5f211.slice. Jul 10 00:30:32.375137 systemd[1]: Created slice kubepods-besteffort-podcbc7ce9d_25c0_407a_b05e_17b25c39498b.slice. Jul 10 00:30:32.382682 systemd[1]: Created slice kubepods-besteffort-pod3945e138_23ea_4e40_b276_0e4f1b6cde2f.slice. Jul 10 00:30:32.388579 systemd[1]: Created slice kubepods-besteffort-pod32d2ba57_5ec9_4de3_ac76_468515e5b7b3.slice. Jul 10 00:30:32.394015 systemd[1]: Created slice kubepods-besteffort-pod924325b4_c2da_44c9_a327_e9f0c80ea83e.slice. Jul 10 00:30:32.415834 kubelet[1946]: I0710 00:30:32.415797 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/924325b4-c2da-44c9-a327-e9f0c80ea83e-whisker-backend-key-pair\") pod \"whisker-66547dc974-gk5j4\" (UID: \"924325b4-c2da-44c9-a327-e9f0c80ea83e\") " pod="calico-system/whisker-66547dc974-gk5j4" Jul 10 00:30:32.416080 kubelet[1946]: I0710 00:30:32.416061 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/3945e138-23ea-4e40-b276-0e4f1b6cde2f-calico-apiserver-certs\") pod \"calico-apiserver-78b48786cd-sstd6\" (UID: \"3945e138-23ea-4e40-b276-0e4f1b6cde2f\") " pod="calico-apiserver/calico-apiserver-78b48786cd-sstd6" Jul 10 00:30:32.416206 kubelet[1946]: I0710 00:30:32.416189 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095-config-volume\") pod \"coredns-7c65d6cfc9-ww9zc\" (UID: \"6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095\") " pod="kube-system/coredns-7c65d6cfc9-ww9zc" Jul 10 00:30:32.416336 kubelet[1946]: I0710 00:30:32.416320 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5e8aa6f5-da0d-40d1-a391-88634bd5f211-calico-apiserver-certs\") pod \"calico-apiserver-78b48786cd-czw7r\" (UID: \"5e8aa6f5-da0d-40d1-a391-88634bd5f211\") " pod="calico-apiserver/calico-apiserver-78b48786cd-czw7r" Jul 10 00:30:32.416454 kubelet[1946]: I0710 00:30:32.416440 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mcqx6\" (UniqueName: \"kubernetes.io/projected/924325b4-c2da-44c9-a327-e9f0c80ea83e-kube-api-access-mcqx6\") pod \"whisker-66547dc974-gk5j4\" (UID: \"924325b4-c2da-44c9-a327-e9f0c80ea83e\") " pod="calico-system/whisker-66547dc974-gk5j4" Jul 10 00:30:32.416574 kubelet[1946]: I0710 00:30:32.416559 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/924325b4-c2da-44c9-a327-e9f0c80ea83e-whisker-ca-bundle\") pod \"whisker-66547dc974-gk5j4\" (UID: \"924325b4-c2da-44c9-a327-e9f0c80ea83e\") " pod="calico-system/whisker-66547dc974-gk5j4" Jul 10 00:30:32.416657 kubelet[1946]: I0710 00:30:32.416643 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ffczp\" (UniqueName: \"kubernetes.io/projected/cbc7ce9d-25c0-407a-b05e-17b25c39498b-kube-api-access-ffczp\") pod \"calico-kube-controllers-8b7698b4b-r27nc\" (UID: \"cbc7ce9d-25c0-407a-b05e-17b25c39498b\") " pod="calico-system/calico-kube-controllers-8b7698b4b-r27nc" Jul 10 00:30:32.416744 kubelet[1946]: I0710 00:30:32.416730 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9x55p\" (UniqueName: \"kubernetes.io/projected/5e8aa6f5-da0d-40d1-a391-88634bd5f211-kube-api-access-9x55p\") pod \"calico-apiserver-78b48786cd-czw7r\" (UID: \"5e8aa6f5-da0d-40d1-a391-88634bd5f211\") " pod="calico-apiserver/calico-apiserver-78b48786cd-czw7r" Jul 10 00:30:32.416822 kubelet[1946]: I0710 00:30:32.416809 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ml8nd\" (UniqueName: \"kubernetes.io/projected/32d2ba57-5ec9-4de3-ac76-468515e5b7b3-kube-api-access-ml8nd\") pod \"goldmane-58fd7646b9-b9rrv\" (UID: \"32d2ba57-5ec9-4de3-ac76-468515e5b7b3\") " pod="calico-system/goldmane-58fd7646b9-b9rrv" Jul 10 00:30:32.416906 kubelet[1946]: I0710 00:30:32.416892 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mrrrj\" (UniqueName: \"kubernetes.io/projected/6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095-kube-api-access-mrrrj\") pod \"coredns-7c65d6cfc9-ww9zc\" (UID: \"6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095\") " pod="kube-system/coredns-7c65d6cfc9-ww9zc" Jul 10 00:30:32.416984 kubelet[1946]: I0710 00:30:32.416972 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qlq4q\" (UniqueName: \"kubernetes.io/projected/d96ad5bd-2619-4aae-87cf-4a850e4349ff-kube-api-access-qlq4q\") pod \"coredns-7c65d6cfc9-c8lgs\" (UID: \"d96ad5bd-2619-4aae-87cf-4a850e4349ff\") " pod="kube-system/coredns-7c65d6cfc9-c8lgs" Jul 10 00:30:32.417056 kubelet[1946]: I0710 00:30:32.417044 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/32d2ba57-5ec9-4de3-ac76-468515e5b7b3-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-b9rrv\" (UID: \"32d2ba57-5ec9-4de3-ac76-468515e5b7b3\") " pod="calico-system/goldmane-58fd7646b9-b9rrv" Jul 10 00:30:32.417143 kubelet[1946]: I0710 00:30:32.417127 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/d96ad5bd-2619-4aae-87cf-4a850e4349ff-config-volume\") pod \"coredns-7c65d6cfc9-c8lgs\" (UID: \"d96ad5bd-2619-4aae-87cf-4a850e4349ff\") " pod="kube-system/coredns-7c65d6cfc9-c8lgs" Jul 10 00:30:32.417236 kubelet[1946]: I0710 00:30:32.417207 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/cbc7ce9d-25c0-407a-b05e-17b25c39498b-tigera-ca-bundle\") pod \"calico-kube-controllers-8b7698b4b-r27nc\" (UID: \"cbc7ce9d-25c0-407a-b05e-17b25c39498b\") " pod="calico-system/calico-kube-controllers-8b7698b4b-r27nc" Jul 10 00:30:32.417327 kubelet[1946]: I0710 00:30:32.417302 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-gpxq6\" (UniqueName: \"kubernetes.io/projected/3945e138-23ea-4e40-b276-0e4f1b6cde2f-kube-api-access-gpxq6\") pod \"calico-apiserver-78b48786cd-sstd6\" (UID: \"3945e138-23ea-4e40-b276-0e4f1b6cde2f\") " pod="calico-apiserver/calico-apiserver-78b48786cd-sstd6" Jul 10 00:30:32.417409 kubelet[1946]: I0710 00:30:32.417396 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/32d2ba57-5ec9-4de3-ac76-468515e5b7b3-config\") pod \"goldmane-58fd7646b9-b9rrv\" (UID: \"32d2ba57-5ec9-4de3-ac76-468515e5b7b3\") " pod="calico-system/goldmane-58fd7646b9-b9rrv" Jul 10 00:30:32.417498 kubelet[1946]: I0710 00:30:32.417484 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/32d2ba57-5ec9-4de3-ac76-468515e5b7b3-goldmane-key-pair\") pod \"goldmane-58fd7646b9-b9rrv\" (UID: \"32d2ba57-5ec9-4de3-ac76-468515e5b7b3\") " pod="calico-system/goldmane-58fd7646b9-b9rrv" Jul 10 00:30:32.661850 kubelet[1946]: E0710 00:30:32.661809 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:32.663284 env[1221]: time="2025-07-10T00:30:32.662512749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-ww9zc,Uid:6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095,Namespace:kube-system,Attempt:0,}" Jul 10 00:30:32.665873 kubelet[1946]: E0710 00:30:32.665839 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:32.667043 env[1221]: time="2025-07-10T00:30:32.666838704Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-c8lgs,Uid:d96ad5bd-2619-4aae-87cf-4a850e4349ff,Namespace:kube-system,Attempt:0,}" Jul 10 00:30:32.676714 env[1221]: time="2025-07-10T00:30:32.676625364Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b48786cd-czw7r,Uid:5e8aa6f5-da0d-40d1-a391-88634bd5f211,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:30:32.677709 env[1221]: time="2025-07-10T00:30:32.677675112Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8b7698b4b-r27nc,Uid:cbc7ce9d-25c0-407a-b05e-17b25c39498b,Namespace:calico-system,Attempt:0,}" Jul 10 00:30:32.689406 env[1221]: time="2025-07-10T00:30:32.689358422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b48786cd-sstd6,Uid:3945e138-23ea-4e40-b276-0e4f1b6cde2f,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:30:32.701780 env[1221]: time="2025-07-10T00:30:32.701735991Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-66547dc974-gk5j4,Uid:924325b4-c2da-44c9-a327-e9f0c80ea83e,Namespace:calico-system,Attempt:0,}" Jul 10 00:30:32.702025 env[1221]: time="2025-07-10T00:30:32.702001158Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-b9rrv,Uid:32d2ba57-5ec9-4de3-ac76-468515e5b7b3,Namespace:calico-system,Attempt:0,}" Jul 10 00:30:32.841334 systemd[1]: Created slice kubepods-besteffort-poddc1f8e65_fe86_487d_86ca_ba8db7978167.slice. Jul 10 00:30:32.849671 env[1221]: time="2025-07-10T00:30:32.849625319Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tx2lp,Uid:dc1f8e65-fe86-487d-86ca-ba8db7978167,Namespace:calico-system,Attempt:0,}" Jul 10 00:30:32.910603 env[1221]: time="2025-07-10T00:30:32.910561978Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 00:30:33.008701 env[1221]: time="2025-07-10T00:30:33.008514212Z" level=error msg="Failed to destroy network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.009034 env[1221]: time="2025-07-10T00:30:33.008973583Z" level=error msg="encountered an error cleaning up failed sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.009097 env[1221]: time="2025-07-10T00:30:33.009027265Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b48786cd-sstd6,Uid:3945e138-23ea-4e40-b276-0e4f1b6cde2f,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.011088 kubelet[1946]: E0710 00:30:33.011010 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.011748 kubelet[1946]: E0710 00:30:33.011709 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-78b48786cd-sstd6" Jul 10 00:30:33.011841 kubelet[1946]: E0710 00:30:33.011751 1946 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-78b48786cd-sstd6" Jul 10 00:30:33.011841 kubelet[1946]: E0710 00:30:33.011811 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-78b48786cd-sstd6_calico-apiserver(3945e138-23ea-4e40-b276-0e4f1b6cde2f)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-78b48786cd-sstd6_calico-apiserver(3945e138-23ea-4e40-b276-0e4f1b6cde2f)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-78b48786cd-sstd6" podUID="3945e138-23ea-4e40-b276-0e4f1b6cde2f" Jul 10 00:30:33.020906 env[1221]: time="2025-07-10T00:30:33.020835686Z" level=error msg="Failed to destroy network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.021294 env[1221]: time="2025-07-10T00:30:33.021247777Z" level=error msg="encountered an error cleaning up failed sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.021419 env[1221]: time="2025-07-10T00:30:33.021338739Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b48786cd-czw7r,Uid:5e8aa6f5-da0d-40d1-a391-88634bd5f211,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.021693 kubelet[1946]: E0710 00:30:33.021630 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.021766 kubelet[1946]: E0710 00:30:33.021721 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-78b48786cd-czw7r" Jul 10 00:30:33.021766 kubelet[1946]: E0710 00:30:33.021748 1946 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-78b48786cd-czw7r" Jul 10 00:30:33.021827 kubelet[1946]: E0710 00:30:33.021792 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-78b48786cd-czw7r_calico-apiserver(5e8aa6f5-da0d-40d1-a391-88634bd5f211)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-78b48786cd-czw7r_calico-apiserver(5e8aa6f5-da0d-40d1-a391-88634bd5f211)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-78b48786cd-czw7r" podUID="5e8aa6f5-da0d-40d1-a391-88634bd5f211" Jul 10 00:30:33.032560 env[1221]: time="2025-07-10T00:30:33.032484743Z" level=error msg="Failed to destroy network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.033142 env[1221]: time="2025-07-10T00:30:33.033090199Z" level=error msg="encountered an error cleaning up failed sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.033190 env[1221]: time="2025-07-10T00:30:33.033155120Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-ww9zc,Uid:6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.033451 kubelet[1946]: E0710 00:30:33.033406 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.033521 kubelet[1946]: E0710 00:30:33.033500 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-ww9zc" Jul 10 00:30:33.033556 kubelet[1946]: E0710 00:30:33.033528 1946 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-ww9zc" Jul 10 00:30:33.033608 kubelet[1946]: E0710 00:30:33.033582 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-ww9zc_kube-system(6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-ww9zc_kube-system(6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-ww9zc" podUID="6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095" Jul 10 00:30:33.040579 env[1221]: time="2025-07-10T00:30:33.040511468Z" level=error msg="Failed to destroy network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.040922 env[1221]: time="2025-07-10T00:30:33.040887998Z" level=error msg="encountered an error cleaning up failed sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.040982 env[1221]: time="2025-07-10T00:30:33.040941039Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-b9rrv,Uid:32d2ba57-5ec9-4de3-ac76-468515e5b7b3,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.041219 kubelet[1946]: E0710 00:30:33.041171 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.041277 kubelet[1946]: E0710 00:30:33.041242 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-b9rrv" Jul 10 00:30:33.041277 kubelet[1946]: E0710 00:30:33.041265 1946 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-b9rrv" Jul 10 00:30:33.044444 kubelet[1946]: E0710 00:30:33.041328 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-b9rrv_calico-system(32d2ba57-5ec9-4de3-ac76-468515e5b7b3)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-b9rrv_calico-system(32d2ba57-5ec9-4de3-ac76-468515e5b7b3)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-b9rrv" podUID="32d2ba57-5ec9-4de3-ac76-468515e5b7b3" Jul 10 00:30:33.057189 env[1221]: time="2025-07-10T00:30:33.057117012Z" level=error msg="Failed to destroy network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.057525 env[1221]: time="2025-07-10T00:30:33.057472981Z" level=error msg="encountered an error cleaning up failed sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.057580 env[1221]: time="2025-07-10T00:30:33.057541303Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-66547dc974-gk5j4,Uid:924325b4-c2da-44c9-a327-e9f0c80ea83e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.057802 kubelet[1946]: E0710 00:30:33.057756 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.057854 kubelet[1946]: E0710 00:30:33.057823 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-66547dc974-gk5j4" Jul 10 00:30:33.057854 kubelet[1946]: E0710 00:30:33.057842 1946 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-66547dc974-gk5j4" Jul 10 00:30:33.057910 kubelet[1946]: E0710 00:30:33.057883 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-66547dc974-gk5j4_calico-system(924325b4-c2da-44c9-a327-e9f0c80ea83e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-66547dc974-gk5j4_calico-system(924325b4-c2da-44c9-a327-e9f0c80ea83e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-66547dc974-gk5j4" podUID="924325b4-c2da-44c9-a327-e9f0c80ea83e" Jul 10 00:30:33.060532 env[1221]: time="2025-07-10T00:30:33.060458657Z" level=error msg="Failed to destroy network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.060932 env[1221]: time="2025-07-10T00:30:33.060885348Z" level=error msg="encountered an error cleaning up failed sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.060976 env[1221]: time="2025-07-10T00:30:33.060939389Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8b7698b4b-r27nc,Uid:cbc7ce9d-25c0-407a-b05e-17b25c39498b,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.062392 kubelet[1946]: E0710 00:30:33.061143 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.062392 kubelet[1946]: E0710 00:30:33.061202 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-8b7698b4b-r27nc" Jul 10 00:30:33.062392 kubelet[1946]: E0710 00:30:33.061218 1946 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-8b7698b4b-r27nc" Jul 10 00:30:33.062558 kubelet[1946]: E0710 00:30:33.061253 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-8b7698b4b-r27nc_calico-system(cbc7ce9d-25c0-407a-b05e-17b25c39498b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-8b7698b4b-r27nc_calico-system(cbc7ce9d-25c0-407a-b05e-17b25c39498b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-8b7698b4b-r27nc" podUID="cbc7ce9d-25c0-407a-b05e-17b25c39498b" Jul 10 00:30:33.064815 env[1221]: time="2025-07-10T00:30:33.064767767Z" level=error msg="Failed to destroy network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.065235 env[1221]: time="2025-07-10T00:30:33.065202698Z" level=error msg="encountered an error cleaning up failed sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.065390 env[1221]: time="2025-07-10T00:30:33.065360022Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-c8lgs,Uid:d96ad5bd-2619-4aae-87cf-4a850e4349ff,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.065670 kubelet[1946]: E0710 00:30:33.065636 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.065731 kubelet[1946]: E0710 00:30:33.065692 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-c8lgs" Jul 10 00:30:33.065731 kubelet[1946]: E0710 00:30:33.065711 1946 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-c8lgs" Jul 10 00:30:33.065792 kubelet[1946]: E0710 00:30:33.065751 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-c8lgs_kube-system(d96ad5bd-2619-4aae-87cf-4a850e4349ff)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-c8lgs_kube-system(d96ad5bd-2619-4aae-87cf-4a850e4349ff)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-c8lgs" podUID="d96ad5bd-2619-4aae-87cf-4a850e4349ff" Jul 10 00:30:33.068501 env[1221]: time="2025-07-10T00:30:33.068130933Z" level=error msg="Failed to destroy network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.068842 env[1221]: time="2025-07-10T00:30:33.068584945Z" level=error msg="encountered an error cleaning up failed sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.068842 env[1221]: time="2025-07-10T00:30:33.068644346Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tx2lp,Uid:dc1f8e65-fe86-487d-86ca-ba8db7978167,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.068943 kubelet[1946]: E0710 00:30:33.068881 1946 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.068985 kubelet[1946]: E0710 00:30:33.068939 1946 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-tx2lp" Jul 10 00:30:33.068985 kubelet[1946]: E0710 00:30:33.068962 1946 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-tx2lp" Jul 10 00:30:33.069033 kubelet[1946]: E0710 00:30:33.069014 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-tx2lp_calico-system(dc1f8e65-fe86-487d-86ca-ba8db7978167)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-tx2lp_calico-system(dc1f8e65-fe86-487d-86ca-ba8db7978167)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-tx2lp" podUID="dc1f8e65-fe86-487d-86ca-ba8db7978167" Jul 10 00:30:33.925280 kubelet[1946]: I0710 00:30:33.925211 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:30:33.927835 env[1221]: time="2025-07-10T00:30:33.927784708Z" level=info msg="StopPodSandbox for \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\"" Jul 10 00:30:33.928150 kubelet[1946]: I0710 00:30:33.928121 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:30:33.930724 env[1221]: time="2025-07-10T00:30:33.930679822Z" level=info msg="StopPodSandbox for \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\"" Jul 10 00:30:33.931909 kubelet[1946]: I0710 00:30:33.931867 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:30:33.934126 env[1221]: time="2025-07-10T00:30:33.934050908Z" level=info msg="StopPodSandbox for \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\"" Jul 10 00:30:33.935661 kubelet[1946]: I0710 00:30:33.935625 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:30:33.937273 env[1221]: time="2025-07-10T00:30:33.937237069Z" level=info msg="StopPodSandbox for \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\"" Jul 10 00:30:33.938290 kubelet[1946]: I0710 00:30:33.938261 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:30:33.939039 env[1221]: time="2025-07-10T00:30:33.938954713Z" level=info msg="StopPodSandbox for \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\"" Jul 10 00:30:33.944865 kubelet[1946]: I0710 00:30:33.944833 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:30:33.945728 env[1221]: time="2025-07-10T00:30:33.945684405Z" level=info msg="StopPodSandbox for \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\"" Jul 10 00:30:33.948415 kubelet[1946]: I0710 00:30:33.948386 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:30:33.948955 env[1221]: time="2025-07-10T00:30:33.948915487Z" level=info msg="StopPodSandbox for \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\"" Jul 10 00:30:33.951122 kubelet[1946]: I0710 00:30:33.951085 1946 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:30:33.952247 env[1221]: time="2025-07-10T00:30:33.952200771Z" level=info msg="StopPodSandbox for \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\"" Jul 10 00:30:33.986492 env[1221]: time="2025-07-10T00:30:33.986434525Z" level=error msg="StopPodSandbox for \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\" failed" error="failed to destroy network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:33.987120 kubelet[1946]: E0710 00:30:33.987079 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:30:33.987213 kubelet[1946]: E0710 00:30:33.987141 1946 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9"} Jul 10 00:30:33.987213 kubelet[1946]: E0710 00:30:33.987203 1946 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"924325b4-c2da-44c9-a327-e9f0c80ea83e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:30:33.987345 kubelet[1946]: E0710 00:30:33.987232 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"924325b4-c2da-44c9-a327-e9f0c80ea83e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-66547dc974-gk5j4" podUID="924325b4-c2da-44c9-a327-e9f0c80ea83e" Jul 10 00:30:34.011667 env[1221]: time="2025-07-10T00:30:34.011179306Z" level=error msg="StopPodSandbox for \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\" failed" error="failed to destroy network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:34.011892 kubelet[1946]: E0710 00:30:34.011852 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:30:34.011956 kubelet[1946]: E0710 00:30:34.011905 1946 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6"} Jul 10 00:30:34.011956 kubelet[1946]: E0710 00:30:34.011949 1946 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:30:34.012052 kubelet[1946]: E0710 00:30:34.011972 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-ww9zc" podUID="6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095" Jul 10 00:30:34.014647 env[1221]: time="2025-07-10T00:30:34.014384665Z" level=error msg="StopPodSandbox for \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\" failed" error="failed to destroy network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:34.014868 kubelet[1946]: E0710 00:30:34.014830 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:30:34.014940 kubelet[1946]: E0710 00:30:34.014881 1946 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02"} Jul 10 00:30:34.014940 kubelet[1946]: E0710 00:30:34.014914 1946 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3945e138-23ea-4e40-b276-0e4f1b6cde2f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:30:34.015032 kubelet[1946]: E0710 00:30:34.014985 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3945e138-23ea-4e40-b276-0e4f1b6cde2f\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-78b48786cd-sstd6" podUID="3945e138-23ea-4e40-b276-0e4f1b6cde2f" Jul 10 00:30:34.032667 env[1221]: time="2025-07-10T00:30:34.032599192Z" level=error msg="StopPodSandbox for \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\" failed" error="failed to destroy network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:34.033115 kubelet[1946]: E0710 00:30:34.033073 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:30:34.033219 kubelet[1946]: E0710 00:30:34.033126 1946 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37"} Jul 10 00:30:34.033219 kubelet[1946]: E0710 00:30:34.033160 1946 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"32d2ba57-5ec9-4de3-ac76-468515e5b7b3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:30:34.033219 kubelet[1946]: E0710 00:30:34.033182 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"32d2ba57-5ec9-4de3-ac76-468515e5b7b3\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-b9rrv" podUID="32d2ba57-5ec9-4de3-ac76-468515e5b7b3" Jul 10 00:30:34.033407 env[1221]: time="2025-07-10T00:30:34.033332050Z" level=error msg="StopPodSandbox for \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\" failed" error="failed to destroy network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:34.033537 kubelet[1946]: E0710 00:30:34.033486 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:30:34.033537 kubelet[1946]: E0710 00:30:34.033532 1946 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f"} Jul 10 00:30:34.033626 kubelet[1946]: E0710 00:30:34.033561 1946 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5e8aa6f5-da0d-40d1-a391-88634bd5f211\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:30:34.033626 kubelet[1946]: E0710 00:30:34.033589 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5e8aa6f5-da0d-40d1-a391-88634bd5f211\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-78b48786cd-czw7r" podUID="5e8aa6f5-da0d-40d1-a391-88634bd5f211" Jul 10 00:30:34.045438 env[1221]: time="2025-07-10T00:30:34.045374105Z" level=error msg="StopPodSandbox for \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\" failed" error="failed to destroy network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:34.046151 kubelet[1946]: E0710 00:30:34.045974 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:30:34.046151 kubelet[1946]: E0710 00:30:34.046045 1946 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e"} Jul 10 00:30:34.046151 kubelet[1946]: E0710 00:30:34.046094 1946 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"dc1f8e65-fe86-487d-86ca-ba8db7978167\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:30:34.046151 kubelet[1946]: E0710 00:30:34.046119 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"dc1f8e65-fe86-487d-86ca-ba8db7978167\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-tx2lp" podUID="dc1f8e65-fe86-487d-86ca-ba8db7978167" Jul 10 00:30:34.063520 env[1221]: time="2025-07-10T00:30:34.063455829Z" level=error msg="StopPodSandbox for \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\" failed" error="failed to destroy network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:34.064123 kubelet[1946]: E0710 00:30:34.063952 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:30:34.064123 kubelet[1946]: E0710 00:30:34.064027 1946 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898"} Jul 10 00:30:34.064123 kubelet[1946]: E0710 00:30:34.064065 1946 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cbc7ce9d-25c0-407a-b05e-17b25c39498b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:30:34.064123 kubelet[1946]: E0710 00:30:34.064095 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cbc7ce9d-25c0-407a-b05e-17b25c39498b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-8b7698b4b-r27nc" podUID="cbc7ce9d-25c0-407a-b05e-17b25c39498b" Jul 10 00:30:34.066674 env[1221]: time="2025-07-10T00:30:34.066619227Z" level=error msg="StopPodSandbox for \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\" failed" error="failed to destroy network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:30:34.067445 kubelet[1946]: E0710 00:30:34.067286 1946 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:30:34.067445 kubelet[1946]: E0710 00:30:34.067354 1946 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8"} Jul 10 00:30:34.067445 kubelet[1946]: E0710 00:30:34.067386 1946 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d96ad5bd-2619-4aae-87cf-4a850e4349ff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:30:34.067445 kubelet[1946]: E0710 00:30:34.067418 1946 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d96ad5bd-2619-4aae-87cf-4a850e4349ff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-c8lgs" podUID="d96ad5bd-2619-4aae-87cf-4a850e4349ff" Jul 10 00:30:34.794745 kubelet[1946]: I0710 00:30:34.794428 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:30:34.795038 kubelet[1946]: E0710 00:30:34.794818 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:34.825000 audit[3192]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3192 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:34.825000 audit[3192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=fffff684bcc0 a2=0 a3=1 items=0 ppid=2095 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:34.825000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:34.833000 audit[3192]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3192 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:34.833000 audit[3192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=fffff684bcc0 a2=0 a3=1 items=0 ppid=2095 pid=3192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:34.833000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:34.953620 kubelet[1946]: E0710 00:30:34.953587 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:37.320559 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2531931224.mount: Deactivated successfully. Jul 10 00:30:37.633494 env[1221]: time="2025-07-10T00:30:37.633380128Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:37.635039 env[1221]: time="2025-07-10T00:30:37.634999284Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:37.636298 env[1221]: time="2025-07-10T00:30:37.636276232Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:37.637539 env[1221]: time="2025-07-10T00:30:37.637510219Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:37.637933 env[1221]: time="2025-07-10T00:30:37.637905307Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 10 00:30:37.652086 env[1221]: time="2025-07-10T00:30:37.651849093Z" level=info msg="CreateContainer within sandbox \"f3756a52c429ebb654653001aaa7ac0a08f0695619fc0c9b2df2f7dac706715d\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 00:30:37.667804 env[1221]: time="2025-07-10T00:30:37.667759083Z" level=info msg="CreateContainer within sandbox \"f3756a52c429ebb654653001aaa7ac0a08f0695619fc0c9b2df2f7dac706715d\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"f8c1cd17152414ab811d369f6952987a3ace2bb104890b93b85aa009190c54ba\"" Jul 10 00:30:37.669772 env[1221]: time="2025-07-10T00:30:37.668354376Z" level=info msg="StartContainer for \"f8c1cd17152414ab811d369f6952987a3ace2bb104890b93b85aa009190c54ba\"" Jul 10 00:30:37.692363 systemd[1]: Started cri-containerd-f8c1cd17152414ab811d369f6952987a3ace2bb104890b93b85aa009190c54ba.scope. Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.743623 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 10 00:30:37.743674 kernel: audit: type=1400 audit(1752107437.741:1037): avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2476 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:37.749681 kernel: audit: type=1300 audit(1752107437.741:1037): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=2476 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:37.749868 kernel: audit: type=1327 audit(1752107437.741:1037): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633163643137313532343134616238313164333639663639353239 Jul 10 00:30:37.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633163643137313532343134616238313164333639663639353239 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.755596 kernel: audit: type=1400 audit(1752107437.741:1038): avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.758746 kernel: audit: type=1400 audit(1752107437.741:1038): avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.759429 kernel: audit: type=1400 audit(1752107437.741:1038): avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.765038 kernel: audit: type=1400 audit(1752107437.741:1038): avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.768977 kernel: audit: type=1400 audit(1752107437.741:1038): avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.771539 kernel: audit: type=1400 audit(1752107437.741:1038): avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.774488 kernel: audit: type=1400 audit(1752107437.741:1038): avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit: BPF prog-id=143 op=LOAD Jul 10 00:30:37.741000 audit[3202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=2476 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:37.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633163643137313532343134616238313164333639663639353239 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit: BPF prog-id=144 op=LOAD Jul 10 00:30:37.741000 audit[3202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=2476 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:37.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633163643137313532343134616238313164333639663639353239 Jul 10 00:30:37.741000 audit: BPF prog-id=144 op=UNLOAD Jul 10 00:30:37.741000 audit: BPF prog-id=143 op=UNLOAD Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { perfmon } for pid=3202 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit[3202]: AVC avc: denied { bpf } for pid=3202 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:37.741000 audit: BPF prog-id=145 op=LOAD Jul 10 00:30:37.741000 audit[3202]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=2476 pid=3202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:37.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633163643137313532343134616238313164333639663639353239 Jul 10 00:30:37.787434 env[1221]: time="2025-07-10T00:30:37.787027861Z" level=info msg="StartContainer for \"f8c1cd17152414ab811d369f6952987a3ace2bb104890b93b85aa009190c54ba\" returns successfully" Jul 10 00:30:37.960199 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 00:30:37.960324 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 00:30:37.979845 kubelet[1946]: I0710 00:30:37.979778 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-l9jv8" podStartSLOduration=0.982058543 podStartE2EDuration="12.979763371s" podCreationTimestamp="2025-07-10 00:30:25 +0000 UTC" firstStartedPulling="2025-07-10 00:30:25.640856054 +0000 UTC m=+20.901058708" lastFinishedPulling="2025-07-10 00:30:37.638560882 +0000 UTC m=+32.898763536" observedRunningTime="2025-07-10 00:30:37.979419963 +0000 UTC m=+33.239622617" watchObservedRunningTime="2025-07-10 00:30:37.979763371 +0000 UTC m=+33.239966025" Jul 10 00:30:38.067503 env[1221]: time="2025-07-10T00:30:38.067452846Z" level=info msg="StopPodSandbox for \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\"" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.193 [INFO][3258] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.193 [INFO][3258] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" iface="eth0" netns="/var/run/netns/cni-8f20615b-89b7-8697-7ada-e7c2cb3c79af" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.194 [INFO][3258] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" iface="eth0" netns="/var/run/netns/cni-8f20615b-89b7-8697-7ada-e7c2cb3c79af" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.195 [INFO][3258] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" iface="eth0" netns="/var/run/netns/cni-8f20615b-89b7-8697-7ada-e7c2cb3c79af" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.195 [INFO][3258] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.195 [INFO][3258] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.287 [INFO][3267] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" HandleID="k8s-pod-network.e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Workload="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.288 [INFO][3267] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.288 [INFO][3267] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.299 [WARNING][3267] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" HandleID="k8s-pod-network.e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Workload="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.299 [INFO][3267] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" HandleID="k8s-pod-network.e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Workload="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.301 [INFO][3267] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:38.305172 env[1221]: 2025-07-10 00:30:38.303 [INFO][3258] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:30:38.305172 env[1221]: time="2025-07-10T00:30:38.305239925Z" level=info msg="TearDown network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\" successfully" Jul 10 00:30:38.305172 env[1221]: time="2025-07-10T00:30:38.305274006Z" level=info msg="StopPodSandbox for \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\" returns successfully" Jul 10 00:30:38.321505 systemd[1]: run-netns-cni\x2d8f20615b\x2d89b7\x2d8697\x2d7ada\x2de7c2cb3c79af.mount: Deactivated successfully. Jul 10 00:30:38.462738 kubelet[1946]: I0710 00:30:38.462703 1946 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-mcqx6\" (UniqueName: \"kubernetes.io/projected/924325b4-c2da-44c9-a327-e9f0c80ea83e-kube-api-access-mcqx6\") pod \"924325b4-c2da-44c9-a327-e9f0c80ea83e\" (UID: \"924325b4-c2da-44c9-a327-e9f0c80ea83e\") " Jul 10 00:30:38.462893 kubelet[1946]: I0710 00:30:38.462754 1946 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/924325b4-c2da-44c9-a327-e9f0c80ea83e-whisker-ca-bundle\") pod \"924325b4-c2da-44c9-a327-e9f0c80ea83e\" (UID: \"924325b4-c2da-44c9-a327-e9f0c80ea83e\") " Jul 10 00:30:38.462893 kubelet[1946]: I0710 00:30:38.462778 1946 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/924325b4-c2da-44c9-a327-e9f0c80ea83e-whisker-backend-key-pair\") pod \"924325b4-c2da-44c9-a327-e9f0c80ea83e\" (UID: \"924325b4-c2da-44c9-a327-e9f0c80ea83e\") " Jul 10 00:30:38.466954 kubelet[1946]: I0710 00:30:38.465460 1946 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/924325b4-c2da-44c9-a327-e9f0c80ea83e-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "924325b4-c2da-44c9-a327-e9f0c80ea83e" (UID: "924325b4-c2da-44c9-a327-e9f0c80ea83e"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 10 00:30:38.468861 systemd[1]: var-lib-kubelet-pods-924325b4\x2dc2da\x2d44c9\x2da327\x2de9f0c80ea83e-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 00:30:38.471118 systemd[1]: var-lib-kubelet-pods-924325b4\x2dc2da\x2d44c9\x2da327\x2de9f0c80ea83e-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dmcqx6.mount: Deactivated successfully. Jul 10 00:30:38.471751 kubelet[1946]: I0710 00:30:38.471714 1946 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/924325b4-c2da-44c9-a327-e9f0c80ea83e-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "924325b4-c2da-44c9-a327-e9f0c80ea83e" (UID: "924325b4-c2da-44c9-a327-e9f0c80ea83e"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 10 00:30:38.472251 kubelet[1946]: I0710 00:30:38.472215 1946 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/924325b4-c2da-44c9-a327-e9f0c80ea83e-kube-api-access-mcqx6" (OuterVolumeSpecName: "kube-api-access-mcqx6") pod "924325b4-c2da-44c9-a327-e9f0c80ea83e" (UID: "924325b4-c2da-44c9-a327-e9f0c80ea83e"). InnerVolumeSpecName "kube-api-access-mcqx6". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 10 00:30:38.563526 kubelet[1946]: I0710 00:30:38.563489 1946 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-mcqx6\" (UniqueName: \"kubernetes.io/projected/924325b4-c2da-44c9-a327-e9f0c80ea83e-kube-api-access-mcqx6\") on node \"localhost\" DevicePath \"\"" Jul 10 00:30:38.563526 kubelet[1946]: I0710 00:30:38.563522 1946 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/924325b4-c2da-44c9-a327-e9f0c80ea83e-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 00:30:38.563526 kubelet[1946]: I0710 00:30:38.563532 1946 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/924325b4-c2da-44c9-a327-e9f0c80ea83e-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 00:30:38.837353 systemd[1]: Removed slice kubepods-besteffort-pod924325b4_c2da_44c9_a327_e9f0c80ea83e.slice. Jul 10 00:30:38.967647 kubelet[1946]: I0710 00:30:38.967391 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:30:39.060872 systemd[1]: Created slice kubepods-besteffort-podf51ddb4c_4d66_476d_af14_346318dc669b.slice. Jul 10 00:30:39.168568 kubelet[1946]: I0710 00:30:39.167625 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qvsl7\" (UniqueName: \"kubernetes.io/projected/f51ddb4c-4d66-476d-af14-346318dc669b-kube-api-access-qvsl7\") pod \"whisker-698fdd8598-wfq9j\" (UID: \"f51ddb4c-4d66-476d-af14-346318dc669b\") " pod="calico-system/whisker-698fdd8598-wfq9j" Jul 10 00:30:39.168568 kubelet[1946]: I0710 00:30:39.167679 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f51ddb4c-4d66-476d-af14-346318dc669b-whisker-backend-key-pair\") pod \"whisker-698fdd8598-wfq9j\" (UID: \"f51ddb4c-4d66-476d-af14-346318dc669b\") " pod="calico-system/whisker-698fdd8598-wfq9j" Jul 10 00:30:39.168568 kubelet[1946]: I0710 00:30:39.167701 1946 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f51ddb4c-4d66-476d-af14-346318dc669b-whisker-ca-bundle\") pod \"whisker-698fdd8598-wfq9j\" (UID: \"f51ddb4c-4d66-476d-af14-346318dc669b\") " pod="calico-system/whisker-698fdd8598-wfq9j" Jul 10 00:30:39.298000 audit[3362]: AVC avc: denied { write } for pid=3362 comm="tee" name="fd" dev="proc" ino=19855 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:30:39.298000 audit[3362]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd87227ed a2=241 a3=1b6 items=1 ppid=3305 pid=3362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.298000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 00:30:39.298000 audit: PATH item=0 name="/dev/fd/63" inode=18733 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:30:39.298000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:30:39.304000 audit[3348]: AVC avc: denied { write } for pid=3348 comm="tee" name="fd" dev="proc" ino=18421 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:30:39.304000 audit[3348]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffdf4b7de a2=241 a3=1b6 items=1 ppid=3297 pid=3348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.304000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 00:30:39.304000 audit: PATH item=0 name="/dev/fd/63" inode=19849 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:30:39.304000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:30:39.306000 audit[3367]: AVC avc: denied { write } for pid=3367 comm="tee" name="fd" dev="proc" ino=18423 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:30:39.306000 audit[3367]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdd9e97ed a2=241 a3=1b6 items=1 ppid=3299 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.306000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 00:30:39.306000 audit: PATH item=0 name="/dev/fd/63" inode=20556 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:30:39.306000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:30:39.316000 audit[3380]: AVC avc: denied { write } for pid=3380 comm="tee" name="fd" dev="proc" ino=18429 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:30:39.316000 audit[3380]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffa0357ed a2=241 a3=1b6 items=1 ppid=3306 pid=3380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.316000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 00:30:39.316000 audit: PATH item=0 name="/dev/fd/63" inode=20561 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:30:39.316000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:30:39.322000 audit[3374]: AVC avc: denied { write } for pid=3374 comm="tee" name="fd" dev="proc" ino=20564 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:30:39.322000 audit[3374]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd30f97ee a2=241 a3=1b6 items=1 ppid=3304 pid=3374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.322000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 00:30:39.322000 audit: PATH item=0 name="/dev/fd/63" inode=18736 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:30:39.322000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:30:39.324000 audit[3355]: AVC avc: denied { write } for pid=3355 comm="tee" name="fd" dev="proc" ino=20566 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:30:39.324000 audit[3355]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd3e0f7dd a2=241 a3=1b6 items=1 ppid=3296 pid=3355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.324000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 00:30:39.324000 audit: PATH item=0 name="/dev/fd/63" inode=19850 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:30:39.324000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:30:39.331000 audit[3371]: AVC avc: denied { write } for pid=3371 comm="tee" name="fd" dev="proc" ino=19859 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:30:39.331000 audit[3371]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffdfd8f7ef a2=241 a3=1b6 items=1 ppid=3298 pid=3371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.331000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 00:30:39.331000 audit: PATH item=0 name="/dev/fd/63" inode=18416 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:30:39.331000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:30:39.364250 env[1221]: time="2025-07-10T00:30:39.364199310Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-698fdd8598-wfq9j,Uid:f51ddb4c-4d66-476d-af14-346318dc669b,Namespace:calico-system,Attempt:0,}" Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit: BPF prog-id=146 op=LOAD Jul 10 00:30:39.521000 audit[3438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffca58e48 a2=98 a3=fffffca58e38 items=0 ppid=3310 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.521000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:30:39.521000 audit: BPF prog-id=146 op=UNLOAD Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit: BPF prog-id=147 op=LOAD Jul 10 00:30:39.521000 audit[3438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffca58cf8 a2=74 a3=95 items=0 ppid=3310 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.521000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:30:39.521000 audit: BPF prog-id=147 op=UNLOAD Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { bpf } for pid=3438 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit: BPF prog-id=148 op=LOAD Jul 10 00:30:39.521000 audit[3438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffca58d28 a2=40 a3=fffffca58d58 items=0 ppid=3310 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.521000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:30:39.521000 audit: BPF prog-id=148 op=UNLOAD Jul 10 00:30:39.521000 audit[3438]: AVC avc: denied { perfmon } for pid=3438 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.521000 audit[3438]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffffca58e40 a2=50 a3=0 items=0 ppid=3310 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.521000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:30:39.523000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.523000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.523000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.523000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.523000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.523000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.523000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.523000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.523000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.523000 audit: BPF prog-id=149 op=LOAD Jul 10 00:30:39.523000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdbce4ee8 a2=98 a3=ffffdbce4ed8 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.523000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.524000 audit: BPF prog-id=149 op=UNLOAD Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit: BPF prog-id=150 op=LOAD Jul 10 00:30:39.524000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdbce4b78 a2=74 a3=95 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.524000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.524000 audit: BPF prog-id=150 op=UNLOAD Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.524000 audit: BPF prog-id=151 op=LOAD Jul 10 00:30:39.524000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdbce4bd8 a2=94 a3=2 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.524000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.524000 audit: BPF prog-id=151 op=UNLOAD Jul 10 00:30:39.562097 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:30:39.562220 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali393eae0cd3a: link becomes ready Jul 10 00:30:39.556677 systemd-networkd[1044]: cali393eae0cd3a: Link UP Jul 10 00:30:39.558850 systemd-networkd[1044]: cali393eae0cd3a: Gained carrier Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.420 [INFO][3386] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.437 [INFO][3386] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--698fdd8598--wfq9j-eth0 whisker-698fdd8598- calico-system f51ddb4c-4d66-476d-af14-346318dc669b 898 0 2025-07-10 00:30:39 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:698fdd8598 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-698fdd8598-wfq9j eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali393eae0cd3a [] [] }} ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Namespace="calico-system" Pod="whisker-698fdd8598-wfq9j" WorkloadEndpoint="localhost-k8s-whisker--698fdd8598--wfq9j-" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.437 [INFO][3386] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Namespace="calico-system" Pod="whisker-698fdd8598-wfq9j" WorkloadEndpoint="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.487 [INFO][3420] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" HandleID="k8s-pod-network.3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Workload="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.487 [INFO][3420] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" HandleID="k8s-pod-network.3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Workload="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000117740), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-698fdd8598-wfq9j", "timestamp":"2025-07-10 00:30:39.487514316 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.487 [INFO][3420] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.487 [INFO][3420] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.488 [INFO][3420] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.509 [INFO][3420] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" host="localhost" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.520 [INFO][3420] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.526 [INFO][3420] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.529 [INFO][3420] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.531 [INFO][3420] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.532 [INFO][3420] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" host="localhost" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.533 [INFO][3420] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.538 [INFO][3420] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" host="localhost" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.542 [INFO][3420] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" host="localhost" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.542 [INFO][3420] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" host="localhost" Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.543 [INFO][3420] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:39.597516 env[1221]: 2025-07-10 00:30:39.543 [INFO][3420] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" HandleID="k8s-pod-network.3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Workload="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" Jul 10 00:30:39.598168 env[1221]: 2025-07-10 00:30:39.544 [INFO][3386] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Namespace="calico-system" Pod="whisker-698fdd8598-wfq9j" WorkloadEndpoint="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--698fdd8598--wfq9j-eth0", GenerateName:"whisker-698fdd8598-", Namespace:"calico-system", SelfLink:"", UID:"f51ddb4c-4d66-476d-af14-346318dc669b", ResourceVersion:"898", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"698fdd8598", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-698fdd8598-wfq9j", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali393eae0cd3a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:39.598168 env[1221]: 2025-07-10 00:30:39.545 [INFO][3386] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Namespace="calico-system" Pod="whisker-698fdd8598-wfq9j" WorkloadEndpoint="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" Jul 10 00:30:39.598168 env[1221]: 2025-07-10 00:30:39.545 [INFO][3386] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali393eae0cd3a ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Namespace="calico-system" Pod="whisker-698fdd8598-wfq9j" WorkloadEndpoint="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" Jul 10 00:30:39.598168 env[1221]: 2025-07-10 00:30:39.561 [INFO][3386] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Namespace="calico-system" Pod="whisker-698fdd8598-wfq9j" WorkloadEndpoint="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" Jul 10 00:30:39.598168 env[1221]: 2025-07-10 00:30:39.562 [INFO][3386] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Namespace="calico-system" Pod="whisker-698fdd8598-wfq9j" WorkloadEndpoint="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--698fdd8598--wfq9j-eth0", GenerateName:"whisker-698fdd8598-", Namespace:"calico-system", SelfLink:"", UID:"f51ddb4c-4d66-476d-af14-346318dc669b", ResourceVersion:"898", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 39, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"698fdd8598", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb", Pod:"whisker-698fdd8598-wfq9j", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali393eae0cd3a", MAC:"7e:21:00:7a:9a:b5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:39.598168 env[1221]: 2025-07-10 00:30:39.578 [INFO][3386] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb" Namespace="calico-system" Pod="whisker-698fdd8598-wfq9j" WorkloadEndpoint="localhost-k8s-whisker--698fdd8598--wfq9j-eth0" Jul 10 00:30:39.616533 env[1221]: time="2025-07-10T00:30:39.616461197Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:39.616697 env[1221]: time="2025-07-10T00:30:39.616503598Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:39.616697 env[1221]: time="2025-07-10T00:30:39.616519839Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:39.616697 env[1221]: time="2025-07-10T00:30:39.616648921Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb pid=3465 runtime=io.containerd.runc.v2 Jul 10 00:30:39.628884 systemd[1]: Started cri-containerd-3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb.scope. Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit: BPF prog-id=152 op=LOAD Jul 10 00:30:39.634000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdbce4b98 a2=40 a3=ffffdbce4bc8 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.634000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.634000 audit: BPF prog-id=152 op=UNLOAD Jul 10 00:30:39.634000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.634000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffdbce4cb0 a2=50 a3=0 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.634000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbce4c08 a2=28 a3=ffffdbce4d38 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbce4c38 a2=28 a3=ffffdbce4d68 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbce4ae8 a2=28 a3=ffffdbce4c18 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbce4c58 a2=28 a3=ffffdbce4d88 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbce4c38 a2=28 a3=ffffdbce4d68 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbce4c28 a2=28 a3=ffffdbce4d58 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbce4c58 a2=28 a3=ffffdbce4d88 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbce4c38 a2=28 a3=ffffdbce4d68 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbce4c58 a2=28 a3=ffffdbce4d88 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbce4c28 a2=28 a3=ffffdbce4d58 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.643000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.643000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbce4ca8 a2=28 a3=ffffdbce4de8 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdbce49e0 a2=50 a3=0 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.644000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit: BPF prog-id=153 op=LOAD Jul 10 00:30:39.644000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdbce49e8 a2=94 a3=5 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.644000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.644000 audit: BPF prog-id=153 op=UNLOAD Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdbce4af0 a2=50 a3=0 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.644000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffdbce4c38 a2=4 a3=3 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.644000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { confidentiality } for pid=3439 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:30:39.644000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdbce4c18 a2=94 a3=6 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.644000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { confidentiality } for pid=3439 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:30:39.644000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdbce43e8 a2=94 a3=83 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.644000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { perfmon } for pid=3439 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { bpf } for pid=3439 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.644000 audit[3439]: AVC avc: denied { confidentiality } for pid=3439 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:30:39.644000 audit[3439]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdbce43e8 a2=94 a3=83 items=0 ppid=3310 pid=3439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.644000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit: BPF prog-id=154 op=LOAD Jul 10 00:30:39.667000 audit[3500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffee20cc48 a2=98 a3=ffffee20cc38 items=0 ppid=3310 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.667000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:30:39.667000 audit: BPF prog-id=154 op=UNLOAD Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit: BPF prog-id=155 op=LOAD Jul 10 00:30:39.667000 audit[3500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffee20caf8 a2=74 a3=95 items=0 ppid=3310 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.667000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:30:39.667000 audit: BPF prog-id=155 op=UNLOAD Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.667000 audit: BPF prog-id=156 op=LOAD Jul 10 00:30:39.667000 audit[3500]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffee20cb28 a2=40 a3=ffffee20cb58 items=0 ppid=3310 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.667000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:30:39.667000 audit: BPF prog-id=156 op=UNLOAD Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.677000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit: BPF prog-id=157 op=LOAD Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3465 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362333965623435343331633664333135633461643232623530353639 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3465 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362333965623435343331633664333135633461643232623530353639 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.678000 audit: BPF prog-id=158 op=LOAD Jul 10 00:30:39.678000 audit[3474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3465 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.678000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362333965623435343331633664333135633461643232623530353639 Jul 10 00:30:39.679000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.679000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.679000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.679000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.679000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.679000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.679000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.679000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.679000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.679000 audit: BPF prog-id=159 op=LOAD Jul 10 00:30:39.679000 audit[3474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3465 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.679000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362333965623435343331633664333135633461643232623530353639 Jul 10 00:30:39.680000 audit: BPF prog-id=159 op=UNLOAD Jul 10 00:30:39.680000 audit: BPF prog-id=158 op=UNLOAD Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { perfmon } for pid=3474 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit[3474]: AVC avc: denied { bpf } for pid=3474 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.680000 audit: BPF prog-id=160 op=LOAD Jul 10 00:30:39.680000 audit[3474]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3465 pid=3474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3362333965623435343331633664333135633461643232623530353639 Jul 10 00:30:39.683598 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:30:39.711624 env[1221]: time="2025-07-10T00:30:39.711559065Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-698fdd8598-wfq9j,Uid:f51ddb4c-4d66-476d-af14-346318dc669b,Namespace:calico-system,Attempt:0,} returns sandbox id \"3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb\"" Jul 10 00:30:39.713320 env[1221]: time="2025-07-10T00:30:39.713078496Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 00:30:39.745749 systemd-networkd[1044]: vxlan.calico: Link UP Jul 10 00:30:39.745755 systemd-networkd[1044]: vxlan.calico: Gained carrier Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit: BPF prog-id=161 op=LOAD Jul 10 00:30:39.772000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcf3b7548 a2=98 a3=ffffcf3b7538 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.772000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.772000 audit: BPF prog-id=161 op=UNLOAD Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit: BPF prog-id=162 op=LOAD Jul 10 00:30:39.772000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcf3b7228 a2=74 a3=95 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.772000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.772000 audit: BPF prog-id=162 op=UNLOAD Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.772000 audit: BPF prog-id=163 op=LOAD Jul 10 00:30:39.772000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcf3b7288 a2=94 a3=2 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.772000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit: BPF prog-id=163 op=UNLOAD Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcf3b72b8 a2=28 a3=ffffcf3b73e8 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf3b72e8 a2=28 a3=ffffcf3b7418 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf3b7198 a2=28 a3=ffffcf3b72c8 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcf3b7308 a2=28 a3=ffffcf3b7438 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcf3b72e8 a2=28 a3=ffffcf3b7418 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcf3b72d8 a2=28 a3=ffffcf3b7408 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcf3b7308 a2=28 a3=ffffcf3b7438 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf3b72e8 a2=28 a3=ffffcf3b7418 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf3b7308 a2=28 a3=ffffcf3b7438 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcf3b72d8 a2=28 a3=ffffcf3b7408 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcf3b7358 a2=28 a3=ffffcf3b7498 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit: BPF prog-id=164 op=LOAD Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcf3b7178 a2=40 a3=ffffcf3b71a8 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit: BPF prog-id=164 op=UNLOAD Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffcf3b71a0 a2=50 a3=0 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffcf3b71a0 a2=50 a3=0 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit: BPF prog-id=165 op=LOAD Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcf3b6908 a2=94 a3=2 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.773000 audit: BPF prog-id=165 op=UNLOAD Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { perfmon } for pid=3548 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit[3548]: AVC avc: denied { bpf } for pid=3548 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.773000 audit: BPF prog-id=166 op=LOAD Jul 10 00:30:39.773000 audit[3548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcf3b6a98 a2=94 a3=30 items=0 ppid=3310 pid=3548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.773000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit: BPF prog-id=167 op=LOAD Jul 10 00:30:39.779000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff43d9068 a2=98 a3=fffff43d9058 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.779000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.779000 audit: BPF prog-id=167 op=UNLOAD Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.779000 audit: BPF prog-id=168 op=LOAD Jul 10 00:30:39.779000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff43d8cf8 a2=74 a3=95 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.779000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.781000 audit: BPF prog-id=168 op=UNLOAD Jul 10 00:30:39.781000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.781000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.781000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.781000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.781000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.781000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.781000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.781000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.781000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.781000 audit: BPF prog-id=169 op=LOAD Jul 10 00:30:39.781000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff43d8d58 a2=94 a3=2 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.781000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.781000 audit: BPF prog-id=169 op=UNLOAD Jul 10 00:30:39.871000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.871000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.871000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.871000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.871000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.871000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.871000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.871000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.871000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.871000 audit: BPF prog-id=170 op=LOAD Jul 10 00:30:39.871000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff43d8d18 a2=40 a3=fffff43d8d48 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.871000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.872000 audit: BPF prog-id=170 op=UNLOAD Jul 10 00:30:39.872000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.872000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff43d8e30 a2=50 a3=0 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.872000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.881000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.881000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff43d8d88 a2=28 a3=fffff43d8eb8 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.881000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.882000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.882000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff43d8db8 a2=28 a3=fffff43d8ee8 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.882000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.882000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff43d8c68 a2=28 a3=fffff43d8d98 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.882000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.882000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff43d8dd8 a2=28 a3=fffff43d8f08 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.882000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.882000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff43d8db8 a2=28 a3=fffff43d8ee8 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.882000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.882000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff43d8da8 a2=28 a3=fffff43d8ed8 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.882000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.882000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff43d8dd8 a2=28 a3=fffff43d8f08 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.882000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.883000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.883000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff43d8db8 a2=28 a3=fffff43d8ee8 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.883000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.883000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.883000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff43d8dd8 a2=28 a3=fffff43d8f08 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.883000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.883000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.883000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff43d8da8 a2=28 a3=fffff43d8ed8 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.883000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.883000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.883000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff43d8e28 a2=28 a3=fffff43d8f68 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.883000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.883000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.883000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff43d8b60 a2=50 a3=0 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.883000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit: BPF prog-id=171 op=LOAD Jul 10 00:30:39.884000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff43d8b68 a2=94 a3=5 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.884000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.884000 audit: BPF prog-id=171 op=UNLOAD Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff43d8c70 a2=50 a3=0 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.884000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.884000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.884000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff43d8db8 a2=4 a3=3 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.884000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { confidentiality } for pid=3550 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:30:39.885000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff43d8d98 a2=94 a3=6 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.885000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.885000 audit[3550]: AVC avc: denied { confidentiality } for pid=3550 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:30:39.885000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff43d8568 a2=94 a3=83 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.885000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { perfmon } for pid=3550 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.886000 audit[3550]: AVC avc: denied { confidentiality } for pid=3550 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:30:39.886000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff43d8568 a2=94 a3=83 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.886000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.887000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.887000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff43d9fa8 a2=10 a3=fffff43da098 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.887000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.887000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.887000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff43d9e68 a2=10 a3=fffff43d9f58 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.887000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.887000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.887000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff43d9dd8 a2=10 a3=fffff43d9f58 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.887000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.887000 audit[3550]: AVC avc: denied { bpf } for pid=3550 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:39.887000 audit[3550]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff43d9dd8 a2=10 a3=fffff43d9f58 items=0 ppid=3310 pid=3550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.887000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:30:39.895000 audit: BPF prog-id=166 op=UNLOAD Jul 10 00:30:39.939000 audit[3594]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3594 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:39.939000 audit[3594]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=fffff7af4d60 a2=0 a3=ffffbd34bfa8 items=0 ppid=3310 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.939000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:39.946000 audit[3593]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3593 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:39.946000 audit[3593]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffe1de45a0 a2=0 a3=ffffb277afa8 items=0 ppid=3310 pid=3593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.946000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:39.950000 audit[3592]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3592 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:39.950000 audit[3592]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffe3b20910 a2=0 a3=ffff9cf59fa8 items=0 ppid=3310 pid=3592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.950000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:39.953000 audit[3597]: NETFILTER_CFG table=filter:104 family=2 entries=94 op=nft_register_chain pid=3597 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:39.953000 audit[3597]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=53116 a0=3 a1=fffffbe3bf30 a2=0 a3=ffffac2cffa8 items=0 ppid=3310 pid=3597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:39.953000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:40.828381 env[1221]: time="2025-07-10T00:30:40.828330629Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:40.830369 env[1221]: time="2025-07-10T00:30:40.830338229Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:40.832360 kubelet[1946]: I0710 00:30:40.832238 1946 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="924325b4-c2da-44c9-a327-e9f0c80ea83e" path="/var/lib/kubelet/pods/924325b4-c2da-44c9-a327-e9f0c80ea83e/volumes" Jul 10 00:30:40.832864 env[1221]: time="2025-07-10T00:30:40.832833799Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:40.834576 env[1221]: time="2025-07-10T00:30:40.834543753Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:40.835201 env[1221]: time="2025-07-10T00:30:40.835167565Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 10 00:30:40.837530 env[1221]: time="2025-07-10T00:30:40.837496531Z" level=info msg="CreateContainer within sandbox \"3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 00:30:40.852199 env[1221]: time="2025-07-10T00:30:40.852133101Z" level=info msg="CreateContainer within sandbox \"3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"ffa21687caf716fd8a00359d7951c71a2f4b97d9d2c59b605fb9de2d85e38dab\"" Jul 10 00:30:40.852992 env[1221]: time="2025-07-10T00:30:40.852940357Z" level=info msg="StartContainer for \"ffa21687caf716fd8a00359d7951c71a2f4b97d9d2c59b605fb9de2d85e38dab\"" Jul 10 00:30:40.881483 systemd[1]: Started cri-containerd-ffa21687caf716fd8a00359d7951c71a2f4b97d9d2c59b605fb9de2d85e38dab.scope. Jul 10 00:30:40.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.897000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.897000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.898000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.898000 audit: BPF prog-id=172 op=LOAD Jul 10 00:30:40.898000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.898000 audit[3638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3465 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:40.898000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666613231363837636166373136666438613030333539643739353163 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3465 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:40.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666613231363837636166373136666438613030333539643739353163 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit: BPF prog-id=173 op=LOAD Jul 10 00:30:40.899000 audit[3638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3465 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:40.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666613231363837636166373136666438613030333539643739353163 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit: BPF prog-id=174 op=LOAD Jul 10 00:30:40.899000 audit[3638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3465 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:40.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666613231363837636166373136666438613030333539643739353163 Jul 10 00:30:40.899000 audit: BPF prog-id=174 op=UNLOAD Jul 10 00:30:40.899000 audit: BPF prog-id=173 op=UNLOAD Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { perfmon } for pid=3638 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit[3638]: AVC avc: denied { bpf } for pid=3638 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:40.899000 audit: BPF prog-id=175 op=LOAD Jul 10 00:30:40.899000 audit[3638]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3465 pid=3638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:40.899000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666613231363837636166373136666438613030333539643739353163 Jul 10 00:30:40.930401 env[1221]: time="2025-07-10T00:30:40.930343411Z" level=info msg="StartContainer for \"ffa21687caf716fd8a00359d7951c71a2f4b97d9d2c59b605fb9de2d85e38dab\" returns successfully" Jul 10 00:30:40.932038 env[1221]: time="2025-07-10T00:30:40.931995764Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 00:30:40.944000 audit[3649]: AVC avc: denied { search } for pid=3649 comm="nginx" name="crypto" dev="proc" ino=19080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c121,c387 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 00:30:40.944000 audit[3649]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff95e54958 a2=0 a3=0 items=0 ppid=3465 pid=3649 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c121,c387 key=(null) Jul 10 00:30:40.944000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 00:30:41.043485 systemd-networkd[1044]: vxlan.calico: Gained IPv6LL Jul 10 00:30:41.395393 systemd[1]: run-containerd-runc-k8s.io-ffa21687caf716fd8a00359d7951c71a2f4b97d9d2c59b605fb9de2d85e38dab-runc.cwJ2Wk.mount: Deactivated successfully. Jul 10 00:30:41.619430 systemd-networkd[1044]: cali393eae0cd3a: Gained IPv6LL Jul 10 00:30:41.715196 systemd[1]: Started sshd@7-10.0.0.46:22-10.0.0.1:50212.service. Jul 10 00:30:41.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.46:22-10.0.0.1:50212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:41.762000 audit[3675]: USER_ACCT pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:41.764520 sshd[3675]: Accepted publickey for core from 10.0.0.1 port 50212 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:30:41.764000 audit[3675]: CRED_ACQ pid=3675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:41.764000 audit[3675]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffedafbb0 a2=3 a3=1 items=0 ppid=1 pid=3675 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:41.764000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:30:41.765877 sshd[3675]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:30:41.770244 systemd-logind[1210]: New session 8 of user core. Jul 10 00:30:41.770518 systemd[1]: Started session-8.scope. Jul 10 00:30:41.772000 audit[3675]: USER_START pid=3675 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:41.773000 audit[3677]: CRED_ACQ pid=3677 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:41.992014 sshd[3675]: pam_unix(sshd:session): session closed for user core Jul 10 00:30:41.991000 audit[3675]: USER_END pid=3675 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:41.992000 audit[3675]: CRED_DISP pid=3675 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:41.995535 systemd[1]: sshd@7-10.0.0.46:22-10.0.0.1:50212.service: Deactivated successfully. Jul 10 00:30:41.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.46:22-10.0.0.1:50212 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:41.996308 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 00:30:41.996877 systemd-logind[1210]: Session 8 logged out. Waiting for processes to exit. Jul 10 00:30:41.997506 systemd-logind[1210]: Removed session 8. Jul 10 00:30:42.809777 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2219762834.mount: Deactivated successfully. Jul 10 00:30:42.855706 env[1221]: time="2025-07-10T00:30:42.855638989Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:42.857485 env[1221]: time="2025-07-10T00:30:42.857447583Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:42.859285 env[1221]: time="2025-07-10T00:30:42.859257817Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:42.860725 env[1221]: time="2025-07-10T00:30:42.860686003Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:42.861396 env[1221]: time="2025-07-10T00:30:42.861364496Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 10 00:30:42.864219 env[1221]: time="2025-07-10T00:30:42.864183068Z" level=info msg="CreateContainer within sandbox \"3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 00:30:42.881424 env[1221]: time="2025-07-10T00:30:42.881377548Z" level=info msg="CreateContainer within sandbox \"3b39eb45431c6d315c4ad22b505693ab0bed163b9d220bfd58699b7856deb5fb\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"0c6b4b69300ab56ca8a30fc8a5c357b32d517f1e9e74d7a555fd488f2f60065f\"" Jul 10 00:30:42.882359 env[1221]: time="2025-07-10T00:30:42.882306326Z" level=info msg="StartContainer for \"0c6b4b69300ab56ca8a30fc8a5c357b32d517f1e9e74d7a555fd488f2f60065f\"" Jul 10 00:30:42.882627 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2876854633.mount: Deactivated successfully. Jul 10 00:30:42.905828 systemd[1]: Started cri-containerd-0c6b4b69300ab56ca8a30fc8a5c357b32d517f1e9e74d7a555fd488f2f60065f.scope. Jul 10 00:30:42.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.930556 kernel: kauditd_printk_skb: 718 callbacks suppressed Jul 10 00:30:42.930618 kernel: audit: type=1400 audit(1752107442.928:1198): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.936451 kernel: audit: type=1400 audit(1752107442.928:1199): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.939098 kernel: audit: type=1400 audit(1752107442.928:1200): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.944513 kernel: audit: type=1400 audit(1752107442.928:1201): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.944597 kernel: audit: type=1400 audit(1752107442.928:1202): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.944618 kernel: audit: type=1400 audit(1752107442.928:1203): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.949252 kernel: audit: type=1400 audit(1752107442.928:1204): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.928000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.951994 kernel: audit: type=1400 audit(1752107442.928:1205): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.952560 kernel: audit: type=1400 audit(1752107442.928:1206): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.928000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.929000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.957333 kernel: audit: type=1400 audit(1752107442.929:1207): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.929000 audit: BPF prog-id=176 op=LOAD Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3465 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:42.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366234623639333030616235366361386133306663386135633335 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3465 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:42.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366234623639333030616235366361386133306663386135633335 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.931000 audit: BPF prog-id=177 op=LOAD Jul 10 00:30:42.931000 audit[3697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3465 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:42.931000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366234623639333030616235366361386133306663386135633335 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit: BPF prog-id=178 op=LOAD Jul 10 00:30:42.932000 audit[3697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3465 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:42.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366234623639333030616235366361386133306663386135633335 Jul 10 00:30:42.932000 audit: BPF prog-id=178 op=UNLOAD Jul 10 00:30:42.932000 audit: BPF prog-id=177 op=UNLOAD Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { perfmon } for pid=3697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit[3697]: AVC avc: denied { bpf } for pid=3697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:42.932000 audit: BPF prog-id=179 op=LOAD Jul 10 00:30:42.932000 audit[3697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3465 pid=3697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:42.932000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063366234623639333030616235366361386133306663386135633335 Jul 10 00:30:42.963594 env[1221]: time="2025-07-10T00:30:42.963546477Z" level=info msg="StartContainer for \"0c6b4b69300ab56ca8a30fc8a5c357b32d517f1e9e74d7a555fd488f2f60065f\" returns successfully" Jul 10 00:30:42.991876 kubelet[1946]: I0710 00:30:42.990801 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-698fdd8598-wfq9j" podStartSLOduration=0.841022076 podStartE2EDuration="3.990782784s" podCreationTimestamp="2025-07-10 00:30:39 +0000 UTC" firstStartedPulling="2025-07-10 00:30:39.712832611 +0000 UTC m=+34.973035225" lastFinishedPulling="2025-07-10 00:30:42.862593279 +0000 UTC m=+38.122795933" observedRunningTime="2025-07-10 00:30:42.98945756 +0000 UTC m=+38.249660214" watchObservedRunningTime="2025-07-10 00:30:42.990782784 +0000 UTC m=+38.250985398" Jul 10 00:30:43.003000 audit[3725]: NETFILTER_CFG table=filter:105 family=2 entries=19 op=nft_register_rule pid=3725 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:43.003000 audit[3725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffdc67940 a2=0 a3=1 items=0 ppid=2095 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:43.003000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:43.011000 audit[3725]: NETFILTER_CFG table=nat:106 family=2 entries=21 op=nft_register_chain pid=3725 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:43.011000 audit[3725]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=fffffdc67940 a2=0 a3=1 items=0 ppid=2095 pid=3725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:43.011000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:45.830261 env[1221]: time="2025-07-10T00:30:45.830219613Z" level=info msg="StopPodSandbox for \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\"" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.877 [INFO][3748] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.878 [INFO][3748] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" iface="eth0" netns="/var/run/netns/cni-90fa58f7-7c9b-2d07-8a55-8146ed968574" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.878 [INFO][3748] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" iface="eth0" netns="/var/run/netns/cni-90fa58f7-7c9b-2d07-8a55-8146ed968574" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.878 [INFO][3748] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" iface="eth0" netns="/var/run/netns/cni-90fa58f7-7c9b-2d07-8a55-8146ed968574" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.878 [INFO][3748] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.878 [INFO][3748] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.903 [INFO][3756] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" HandleID="k8s-pod-network.b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.903 [INFO][3756] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.903 [INFO][3756] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.913 [WARNING][3756] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" HandleID="k8s-pod-network.b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.913 [INFO][3756] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" HandleID="k8s-pod-network.b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.914 [INFO][3756] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:45.918071 env[1221]: 2025-07-10 00:30:45.916 [INFO][3748] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:30:45.920138 env[1221]: time="2025-07-10T00:30:45.919679020Z" level=info msg="TearDown network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\" successfully" Jul 10 00:30:45.920138 env[1221]: time="2025-07-10T00:30:45.919721461Z" level=info msg="StopPodSandbox for \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\" returns successfully" Jul 10 00:30:45.920235 systemd[1]: run-netns-cni\x2d90fa58f7\x2d7c9b\x2d2d07\x2d8a55\x2d8146ed968574.mount: Deactivated successfully. Jul 10 00:30:45.921129 env[1221]: time="2025-07-10T00:30:45.921094244Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b48786cd-czw7r,Uid:5e8aa6f5-da0d-40d1-a391-88634bd5f211,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:30:46.039731 systemd-networkd[1044]: cali2924b446e30: Link UP Jul 10 00:30:46.041761 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:30:46.041881 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2924b446e30: link becomes ready Jul 10 00:30:46.041812 systemd-networkd[1044]: cali2924b446e30: Gained carrier Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:45.969 [INFO][3763] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0 calico-apiserver-78b48786cd- calico-apiserver 5e8aa6f5-da0d-40d1-a391-88634bd5f211 986 0 2025-07-10 00:30:20 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:78b48786cd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-78b48786cd-czw7r eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali2924b446e30 [] [] }} ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-czw7r" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--czw7r-" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:45.969 [INFO][3763] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-czw7r" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:45.993 [INFO][3778] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" HandleID="k8s-pod-network.7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:45.993 [INFO][3778] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" HandleID="k8s-pod-network.7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004cab0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-78b48786cd-czw7r", "timestamp":"2025-07-10 00:30:45.993751724 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:45.993 [INFO][3778] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:45.993 [INFO][3778] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:45.994 [INFO][3778] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.007 [INFO][3778] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" host="localhost" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.012 [INFO][3778] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.017 [INFO][3778] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.019 [INFO][3778] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.021 [INFO][3778] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.021 [INFO][3778] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" host="localhost" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.023 [INFO][3778] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598 Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.027 [INFO][3778] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" host="localhost" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.034 [INFO][3778] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" host="localhost" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.034 [INFO][3778] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" host="localhost" Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.034 [INFO][3778] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:46.058162 env[1221]: 2025-07-10 00:30:46.034 [INFO][3778] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" HandleID="k8s-pod-network.7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:46.058759 env[1221]: 2025-07-10 00:30:46.036 [INFO][3763] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-czw7r" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0", GenerateName:"calico-apiserver-78b48786cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e8aa6f5-da0d-40d1-a391-88634bd5f211", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b48786cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-78b48786cd-czw7r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2924b446e30", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:46.058759 env[1221]: 2025-07-10 00:30:46.036 [INFO][3763] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-czw7r" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:46.058759 env[1221]: 2025-07-10 00:30:46.036 [INFO][3763] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2924b446e30 ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-czw7r" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:46.058759 env[1221]: 2025-07-10 00:30:46.042 [INFO][3763] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-czw7r" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:46.058759 env[1221]: 2025-07-10 00:30:46.042 [INFO][3763] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-czw7r" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0", GenerateName:"calico-apiserver-78b48786cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e8aa6f5-da0d-40d1-a391-88634bd5f211", ResourceVersion:"986", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b48786cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598", Pod:"calico-apiserver-78b48786cd-czw7r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2924b446e30", MAC:"32:2b:0c:e6:3a:b0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:46.058759 env[1221]: 2025-07-10 00:30:46.054 [INFO][3763] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-czw7r" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:30:46.065000 audit[3797]: NETFILTER_CFG table=filter:107 family=2 entries=50 op=nft_register_chain pid=3797 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:46.065000 audit[3797]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffe9d7ead0 a2=0 a3=ffffb2b54fa8 items=0 ppid=3310 pid=3797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:46.065000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:46.069348 env[1221]: time="2025-07-10T00:30:46.069262742Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:46.069435 env[1221]: time="2025-07-10T00:30:46.069367504Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:46.069435 env[1221]: time="2025-07-10T00:30:46.069400304Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:46.069638 env[1221]: time="2025-07-10T00:30:46.069581307Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598 pid=3804 runtime=io.containerd.runc.v2 Jul 10 00:30:46.082790 systemd[1]: Started cri-containerd-7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598.scope. Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.113000 audit: BPF prog-id=180 op=LOAD Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3804 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:46.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765663834666237626638343439636434656232346464313732353933 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3804 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:46.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765663834666237626638343439636434656232346464313732353933 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit: BPF prog-id=181 op=LOAD Jul 10 00:30:46.114000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3804 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:46.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765663834666237626638343439636434656232346464313732353933 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit: BPF prog-id=182 op=LOAD Jul 10 00:30:46.114000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3804 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:46.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765663834666237626638343439636434656232346464313732353933 Jul 10 00:30:46.114000 audit: BPF prog-id=182 op=UNLOAD Jul 10 00:30:46.114000 audit: BPF prog-id=181 op=UNLOAD Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { perfmon } for pid=3813 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit[3813]: AVC avc: denied { bpf } for pid=3813 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:46.114000 audit: BPF prog-id=183 op=LOAD Jul 10 00:30:46.114000 audit[3813]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3804 pid=3813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:46.114000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3765663834666237626638343439636434656232346464313732353933 Jul 10 00:30:46.116773 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:30:46.133442 env[1221]: time="2025-07-10T00:30:46.133400448Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b48786cd-czw7r,Uid:5e8aa6f5-da0d-40d1-a391-88634bd5f211,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598\"" Jul 10 00:30:46.135293 env[1221]: time="2025-07-10T00:30:46.135259959Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:30:46.830402 env[1221]: time="2025-07-10T00:30:46.830241145Z" level=info msg="StopPodSandbox for \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\"" Jul 10 00:30:46.832536 env[1221]: time="2025-07-10T00:30:46.832412621Z" level=info msg="StopPodSandbox for \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\"" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.899 [INFO][3855] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.899 [INFO][3855] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" iface="eth0" netns="/var/run/netns/cni-9a9170d0-a18a-fdf6-a148-4ebced72a18f" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.899 [INFO][3855] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" iface="eth0" netns="/var/run/netns/cni-9a9170d0-a18a-fdf6-a148-4ebced72a18f" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.899 [INFO][3855] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" iface="eth0" netns="/var/run/netns/cni-9a9170d0-a18a-fdf6-a148-4ebced72a18f" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.899 [INFO][3855] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.899 [INFO][3855] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.931 [INFO][3876] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" HandleID="k8s-pod-network.edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.931 [INFO][3876] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.931 [INFO][3876] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.944 [WARNING][3876] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" HandleID="k8s-pod-network.edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.944 [INFO][3876] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" HandleID="k8s-pod-network.edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.949 [INFO][3876] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:46.953180 env[1221]: 2025-07-10 00:30:46.951 [INFO][3855] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:30:46.956080 systemd[1]: run-netns-cni\x2d9a9170d0\x2da18a\x2dfdf6\x2da148\x2d4ebced72a18f.mount: Deactivated successfully. Jul 10 00:30:46.957597 env[1221]: time="2025-07-10T00:30:46.957554540Z" level=info msg="TearDown network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\" successfully" Jul 10 00:30:46.957787 env[1221]: time="2025-07-10T00:30:46.957763703Z" level=info msg="StopPodSandbox for \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\" returns successfully" Jul 10 00:30:46.958608 env[1221]: time="2025-07-10T00:30:46.958548476Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8b7698b4b-r27nc,Uid:cbc7ce9d-25c0-407a-b05e-17b25c39498b,Namespace:calico-system,Attempt:1,}" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.917 [INFO][3866] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.920 [INFO][3866] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" iface="eth0" netns="/var/run/netns/cni-c62bbdab-eeba-d0db-b085-0a0e016f1a2e" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.921 [INFO][3866] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" iface="eth0" netns="/var/run/netns/cni-c62bbdab-eeba-d0db-b085-0a0e016f1a2e" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.921 [INFO][3866] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" iface="eth0" netns="/var/run/netns/cni-c62bbdab-eeba-d0db-b085-0a0e016f1a2e" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.921 [INFO][3866] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.921 [INFO][3866] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.957 [INFO][3884] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" HandleID="k8s-pod-network.50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.958 [INFO][3884] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.958 [INFO][3884] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.973 [WARNING][3884] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" HandleID="k8s-pod-network.50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.975 [INFO][3884] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" HandleID="k8s-pod-network.50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.977 [INFO][3884] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:46.980920 env[1221]: 2025-07-10 00:30:46.979 [INFO][3866] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:30:46.984645 env[1221]: time="2025-07-10T00:30:46.984220503Z" level=info msg="TearDown network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\" successfully" Jul 10 00:30:46.984645 env[1221]: time="2025-07-10T00:30:46.984255183Z" level=info msg="StopPodSandbox for \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\" returns successfully" Jul 10 00:30:46.984703 kubelet[1946]: E0710 00:30:46.984538 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:46.983287 systemd[1]: run-netns-cni\x2dc62bbdab\x2deeba\x2dd0db\x2db085\x2d0a0e016f1a2e.mount: Deactivated successfully. Jul 10 00:30:46.985556 env[1221]: time="2025-07-10T00:30:46.985467483Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-c8lgs,Uid:d96ad5bd-2619-4aae-87cf-4a850e4349ff,Namespace:kube-system,Attempt:1,}" Jul 10 00:30:46.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.46:22-10.0.0.1:46862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:47.000101 systemd[1]: Started sshd@8-10.0.0.46:22-10.0.0.1:46862.service. Jul 10 00:30:47.054000 audit[3894]: USER_ACCT pid=3894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:47.056406 sshd[3894]: Accepted publickey for core from 10.0.0.1 port 46862 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:30:47.060000 audit[3894]: CRED_ACQ pid=3894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:47.060000 audit[3894]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff7c91480 a2=3 a3=1 items=0 ppid=1 pid=3894 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.060000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:30:47.062444 sshd[3894]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:30:47.066462 systemd-logind[1210]: New session 9 of user core. Jul 10 00:30:47.067476 systemd[1]: Started session-9.scope. Jul 10 00:30:47.072000 audit[3894]: USER_START pid=3894 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:47.073000 audit[3923]: CRED_ACQ pid=3923 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:47.136501 systemd-networkd[1044]: cali939a2262830: Link UP Jul 10 00:30:47.138969 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:30:47.139034 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali939a2262830: link becomes ready Jul 10 00:30:47.143275 systemd-networkd[1044]: cali939a2262830: Gained carrier Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.058 [INFO][3896] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0 calico-kube-controllers-8b7698b4b- calico-system cbc7ce9d-25c0-407a-b05e-17b25c39498b 995 0 2025-07-10 00:30:25 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:8b7698b4b projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-8b7698b4b-r27nc eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali939a2262830 [] [] }} ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Namespace="calico-system" Pod="calico-kube-controllers-8b7698b4b-r27nc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.058 [INFO][3896] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Namespace="calico-system" Pod="calico-kube-controllers-8b7698b4b-r27nc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.093 [INFO][3926] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" HandleID="k8s-pod-network.8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.093 [INFO][3926] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" HandleID="k8s-pod-network.8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000592b20), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-8b7698b4b-r27nc", "timestamp":"2025-07-10 00:30:47.093808684 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.094 [INFO][3926] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.094 [INFO][3926] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.094 [INFO][3926] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.103 [INFO][3926] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" host="localhost" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.109 [INFO][3926] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.114 [INFO][3926] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.116 [INFO][3926] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.118 [INFO][3926] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.118 [INFO][3926] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" host="localhost" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.120 [INFO][3926] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504 Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.124 [INFO][3926] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" host="localhost" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.131 [INFO][3926] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" host="localhost" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.131 [INFO][3926] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" host="localhost" Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.131 [INFO][3926] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:47.159128 env[1221]: 2025-07-10 00:30:47.131 [INFO][3926] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" HandleID="k8s-pod-network.8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:47.159747 env[1221]: 2025-07-10 00:30:47.134 [INFO][3896] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Namespace="calico-system" Pod="calico-kube-controllers-8b7698b4b-r27nc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0", GenerateName:"calico-kube-controllers-8b7698b4b-", Namespace:"calico-system", SelfLink:"", UID:"cbc7ce9d-25c0-407a-b05e-17b25c39498b", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8b7698b4b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-8b7698b4b-r27nc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali939a2262830", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:47.159747 env[1221]: 2025-07-10 00:30:47.135 [INFO][3896] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Namespace="calico-system" Pod="calico-kube-controllers-8b7698b4b-r27nc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:47.159747 env[1221]: 2025-07-10 00:30:47.135 [INFO][3896] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali939a2262830 ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Namespace="calico-system" Pod="calico-kube-controllers-8b7698b4b-r27nc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:47.159747 env[1221]: 2025-07-10 00:30:47.139 [INFO][3896] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Namespace="calico-system" Pod="calico-kube-controllers-8b7698b4b-r27nc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:47.159747 env[1221]: 2025-07-10 00:30:47.142 [INFO][3896] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Namespace="calico-system" Pod="calico-kube-controllers-8b7698b4b-r27nc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0", GenerateName:"calico-kube-controllers-8b7698b4b-", Namespace:"calico-system", SelfLink:"", UID:"cbc7ce9d-25c0-407a-b05e-17b25c39498b", ResourceVersion:"995", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8b7698b4b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504", Pod:"calico-kube-controllers-8b7698b4b-r27nc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali939a2262830", MAC:"16:f7:dd:8e:0b:3a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:47.159747 env[1221]: 2025-07-10 00:30:47.154 [INFO][3896] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504" Namespace="calico-system" Pod="calico-kube-controllers-8b7698b4b-r27nc" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:30:47.177596 env[1221]: time="2025-07-10T00:30:47.177503079Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:47.177596 env[1221]: time="2025-07-10T00:30:47.177543720Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:47.177596 env[1221]: time="2025-07-10T00:30:47.177553800Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:47.177800 env[1221]: time="2025-07-10T00:30:47.177651362Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504 pid=3968 runtime=io.containerd.runc.v2 Jul 10 00:30:47.176000 audit[3967]: NETFILTER_CFG table=filter:108 family=2 entries=40 op=nft_register_chain pid=3967 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:47.176000 audit[3967]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20764 a0=3 a1=ffffc4020e50 a2=0 a3=ffffa5e9ffa8 items=0 ppid=3310 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.176000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:47.194028 systemd[1]: Started cri-containerd-8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504.scope. Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.224000 audit: BPF prog-id=184 op=LOAD Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3968 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313332386461366232623062373832383436653135653331386432 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3968 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313332386461366232623062373832383436653135653331386432 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit: BPF prog-id=185 op=LOAD Jul 10 00:30:47.225000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3968 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313332386461366232623062373832383436653135653331386432 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit: BPF prog-id=186 op=LOAD Jul 10 00:30:47.225000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3968 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313332386461366232623062373832383436653135653331386432 Jul 10 00:30:47.225000 audit: BPF prog-id=186 op=UNLOAD Jul 10 00:30:47.225000 audit: BPF prog-id=185 op=UNLOAD Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { perfmon } for pid=3977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit[3977]: AVC avc: denied { bpf } for pid=3977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.225000 audit: BPF prog-id=187 op=LOAD Jul 10 00:30:47.225000 audit[3977]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3968 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.225000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3865313332386461366232623062373832383436653135653331386432 Jul 10 00:30:47.229341 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:30:47.251277 systemd-networkd[1044]: calicbea1a66572: Link UP Jul 10 00:30:47.253392 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calicbea1a66572: link becomes ready Jul 10 00:30:47.253398 systemd-networkd[1044]: calicbea1a66572: Gained carrier Jul 10 00:30:47.265765 env[1221]: time="2025-07-10T00:30:47.265705947Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-8b7698b4b-r27nc,Uid:cbc7ce9d-25c0-407a-b05e-17b25c39498b,Namespace:calico-system,Attempt:1,} returns sandbox id \"8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504\"" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.062 [INFO][3905] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0 coredns-7c65d6cfc9- kube-system d96ad5bd-2619-4aae-87cf-4a850e4349ff 996 0 2025-07-10 00:30:11 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-c8lgs eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calicbea1a66572 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Namespace="kube-system" Pod="coredns-7c65d6cfc9-c8lgs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--c8lgs-" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.062 [INFO][3905] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Namespace="kube-system" Pod="coredns-7c65d6cfc9-c8lgs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.098 [INFO][3924] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" HandleID="k8s-pod-network.f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.099 [INFO][3924] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" HandleID="k8s-pod-network.f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c7a0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-c8lgs", "timestamp":"2025-07-10 00:30:47.098906367 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.099 [INFO][3924] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.131 [INFO][3924] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.131 [INFO][3924] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.205 [INFO][3924] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" host="localhost" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.212 [INFO][3924] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.222 [INFO][3924] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.224 [INFO][3924] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.229 [INFO][3924] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.229 [INFO][3924] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" host="localhost" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.232 [INFO][3924] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0 Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.237 [INFO][3924] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" host="localhost" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.245 [INFO][3924] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" host="localhost" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.245 [INFO][3924] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" host="localhost" Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.245 [INFO][3924] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:47.273269 env[1221]: 2025-07-10 00:30:47.245 [INFO][3924] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" HandleID="k8s-pod-network.f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:47.273974 env[1221]: 2025-07-10 00:30:47.248 [INFO][3905] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Namespace="kube-system" Pod="coredns-7c65d6cfc9-c8lgs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"d96ad5bd-2619-4aae-87cf-4a850e4349ff", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-c8lgs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicbea1a66572", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:47.273974 env[1221]: 2025-07-10 00:30:47.248 [INFO][3905] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Namespace="kube-system" Pod="coredns-7c65d6cfc9-c8lgs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:47.273974 env[1221]: 2025-07-10 00:30:47.248 [INFO][3905] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calicbea1a66572 ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Namespace="kube-system" Pod="coredns-7c65d6cfc9-c8lgs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:47.273974 env[1221]: 2025-07-10 00:30:47.253 [INFO][3905] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Namespace="kube-system" Pod="coredns-7c65d6cfc9-c8lgs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:47.273974 env[1221]: 2025-07-10 00:30:47.253 [INFO][3905] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Namespace="kube-system" Pod="coredns-7c65d6cfc9-c8lgs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"d96ad5bd-2619-4aae-87cf-4a850e4349ff", ResourceVersion:"996", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0", Pod:"coredns-7c65d6cfc9-c8lgs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicbea1a66572", MAC:"02:f2:bc:cd:48:54", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:47.273974 env[1221]: 2025-07-10 00:30:47.262 [INFO][3905] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0" Namespace="kube-system" Pod="coredns-7c65d6cfc9-c8lgs" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:30:47.286000 audit[4013]: NETFILTER_CFG table=filter:109 family=2 entries=50 op=nft_register_chain pid=4013 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:47.286000 audit[4013]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24928 a0=3 a1=ffffded88ca0 a2=0 a3=ffff82fb7fa8 items=0 ppid=3310 pid=4013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.286000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:47.304122 sshd[3894]: pam_unix(sshd:session): session closed for user core Jul 10 00:30:47.304912 env[1221]: time="2025-07-10T00:30:47.300631113Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:47.304912 env[1221]: time="2025-07-10T00:30:47.300680273Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:47.304912 env[1221]: time="2025-07-10T00:30:47.300691274Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:47.304912 env[1221]: time="2025-07-10T00:30:47.300899117Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0 pid=4021 runtime=io.containerd.runc.v2 Jul 10 00:30:47.304000 audit[3894]: USER_END pid=3894 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:47.304000 audit[3894]: CRED_DISP pid=3894 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:47.306000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.46:22-10.0.0.1:46862 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:47.307449 systemd[1]: sshd@8-10.0.0.46:22-10.0.0.1:46862.service: Deactivated successfully. Jul 10 00:30:47.308183 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 00:30:47.308690 systemd-logind[1210]: Session 9 logged out. Waiting for processes to exit. Jul 10 00:30:47.309521 systemd-logind[1210]: Removed session 9. Jul 10 00:30:47.317070 systemd[1]: Started cri-containerd-f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0.scope. Jul 10 00:30:47.359000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.360000 audit: BPF prog-id=188 op=LOAD Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4021 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613834316234313132636364356538306633333834366430323664 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4021 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613834316234313132636364356538306633333834366430323664 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.361000 audit: BPF prog-id=189 op=LOAD Jul 10 00:30:47.361000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4021 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.361000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613834316234313132636364356538306633333834366430323664 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit: BPF prog-id=190 op=LOAD Jul 10 00:30:47.362000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4021 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613834316234313132636364356538306633333834366430323664 Jul 10 00:30:47.362000 audit: BPF prog-id=190 op=UNLOAD Jul 10 00:30:47.362000 audit: BPF prog-id=189 op=UNLOAD Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { perfmon } for pid=4030 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit[4030]: AVC avc: denied { bpf } for pid=4030 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.362000 audit: BPF prog-id=191 op=LOAD Jul 10 00:30:47.362000 audit[4030]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4021 pid=4030 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.362000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613834316234313132636364356538306633333834366430323664 Jul 10 00:30:47.364063 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:30:47.382392 env[1221]: time="2025-07-10T00:30:47.382350956Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-c8lgs,Uid:d96ad5bd-2619-4aae-87cf-4a850e4349ff,Namespace:kube-system,Attempt:1,} returns sandbox id \"f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0\"" Jul 10 00:30:47.383276 kubelet[1946]: E0710 00:30:47.383250 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:47.387212 env[1221]: time="2025-07-10T00:30:47.387170234Z" level=info msg="CreateContainer within sandbox \"f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:30:47.403973 env[1221]: time="2025-07-10T00:30:47.403166933Z" level=info msg="CreateContainer within sandbox \"f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"fa3a95b2450171be5967a3532f2d92bc8261c36864190bc47698f9de142038bf\"" Jul 10 00:30:47.403973 env[1221]: time="2025-07-10T00:30:47.403799943Z" level=info msg="StartContainer for \"fa3a95b2450171be5967a3532f2d92bc8261c36864190bc47698f9de142038bf\"" Jul 10 00:30:47.418784 systemd[1]: Started cri-containerd-fa3a95b2450171be5967a3532f2d92bc8261c36864190bc47698f9de142038bf.scope. Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.454000 audit: BPF prog-id=192 op=LOAD Jul 10 00:30:47.455000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.455000 audit[4062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4021 pid=4062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661336139356232343530313731626535393637613335333266326439 Jul 10 00:30:47.455000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.455000 audit[4062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4021 pid=4062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661336139356232343530313731626535393637613335333266326439 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit: BPF prog-id=193 op=LOAD Jul 10 00:30:47.456000 audit[4062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4021 pid=4062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661336139356232343530313731626535393637613335333266326439 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.456000 audit: BPF prog-id=194 op=LOAD Jul 10 00:30:47.456000 audit[4062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4021 pid=4062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661336139356232343530313731626535393637613335333266326439 Jul 10 00:30:47.457000 audit: BPF prog-id=194 op=UNLOAD Jul 10 00:30:47.457000 audit: BPF prog-id=193 op=UNLOAD Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { perfmon } for pid=4062 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit[4062]: AVC avc: denied { bpf } for pid=4062 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:47.457000 audit: BPF prog-id=195 op=LOAD Jul 10 00:30:47.457000 audit[4062]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4021 pid=4062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:47.457000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6661336139356232343530313731626535393637613335333266326439 Jul 10 00:30:47.473130 env[1221]: time="2025-07-10T00:30:47.473077665Z" level=info msg="StartContainer for \"fa3a95b2450171be5967a3532f2d92bc8261c36864190bc47698f9de142038bf\" returns successfully" Jul 10 00:30:47.554000 audit[4073]: AVC avc: denied { getattr } for pid=4073 comm="coredns" path="cgroup:[4026532267]" dev="nsfs" ino=4026532267 scontext=system_u:system_r:svirt_lxc_net_t:s0:c586,c795 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:30:47.554000 audit[4073]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056a38 a2=40000da578 a3=0 items=0 ppid=4021 pid=4073 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c586,c795 key=(null) Jul 10 00:30:47.554000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:30:47.571509 systemd-networkd[1044]: cali2924b446e30: Gained IPv6LL Jul 10 00:30:47.829987 env[1221]: time="2025-07-10T00:30:47.829939882Z" level=info msg="StopPodSandbox for \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\"" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.873 [INFO][4108] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.873 [INFO][4108] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" iface="eth0" netns="/var/run/netns/cni-083847f7-a6bf-754d-931c-ec68c719b05c" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.873 [INFO][4108] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" iface="eth0" netns="/var/run/netns/cni-083847f7-a6bf-754d-931c-ec68c719b05c" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.873 [INFO][4108] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" iface="eth0" netns="/var/run/netns/cni-083847f7-a6bf-754d-931c-ec68c719b05c" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.873 [INFO][4108] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.873 [INFO][4108] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.893 [INFO][4117] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" HandleID="k8s-pod-network.ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.893 [INFO][4117] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.894 [INFO][4117] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.903 [WARNING][4117] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" HandleID="k8s-pod-network.ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.903 [INFO][4117] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" HandleID="k8s-pod-network.ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.905 [INFO][4117] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:47.908663 env[1221]: 2025-07-10 00:30:47.906 [INFO][4108] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:30:47.909257 env[1221]: time="2025-07-10T00:30:47.908807039Z" level=info msg="TearDown network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\" successfully" Jul 10 00:30:47.909257 env[1221]: time="2025-07-10T00:30:47.908837720Z" level=info msg="StopPodSandbox for \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\" returns successfully" Jul 10 00:30:47.909565 env[1221]: time="2025-07-10T00:30:47.909522891Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b48786cd-sstd6,Uid:3945e138-23ea-4e40-b276-0e4f1b6cde2f,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:30:47.959056 systemd[1]: run-netns-cni\x2d083847f7\x2da6bf\x2d754d\x2d931c\x2dec68c719b05c.mount: Deactivated successfully. Jul 10 00:30:47.994644 kubelet[1946]: E0710 00:30:47.994255 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:48.011404 kubelet[1946]: I0710 00:30:48.010011 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-c8lgs" podStartSLOduration=37.009992834 podStartE2EDuration="37.009992834s" podCreationTimestamp="2025-07-10 00:30:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:30:48.009375464 +0000 UTC m=+43.269578158" watchObservedRunningTime="2025-07-10 00:30:48.009992834 +0000 UTC m=+43.270195488" Jul 10 00:30:48.032000 audit[4149]: NETFILTER_CFG table=filter:110 family=2 entries=18 op=nft_register_rule pid=4149 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:48.034641 kernel: kauditd_printk_skb: 304 callbacks suppressed Jul 10 00:30:48.034729 kernel: audit: type=1325 audit(1752107448.032:1303): table=filter:110 family=2 entries=18 op=nft_register_rule pid=4149 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:48.032000 audit[4149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc8d93ab0 a2=0 a3=1 items=0 ppid=2095 pid=4149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.040628 kernel: audit: type=1300 audit(1752107448.032:1303): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc8d93ab0 a2=0 a3=1 items=0 ppid=2095 pid=4149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.032000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:48.044369 kernel: audit: type=1327 audit(1752107448.032:1303): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:48.043000 audit[4149]: NETFILTER_CFG table=nat:111 family=2 entries=16 op=nft_register_rule pid=4149 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:48.047331 kernel: audit: type=1325 audit(1752107448.043:1304): table=nat:111 family=2 entries=16 op=nft_register_rule pid=4149 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:48.043000 audit[4149]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=ffffc8d93ab0 a2=0 a3=1 items=0 ppid=2095 pid=4149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.043000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:48.053631 kernel: audit: type=1300 audit(1752107448.043:1304): arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=ffffc8d93ab0 a2=0 a3=1 items=0 ppid=2095 pid=4149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.053681 kernel: audit: type=1327 audit(1752107448.043:1304): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:48.061877 systemd-networkd[1044]: calic26c760bb11: Link UP Jul 10 00:30:48.063386 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic26c760bb11: link becomes ready Jul 10 00:30:48.063423 systemd-networkd[1044]: calic26c760bb11: Gained carrier Jul 10 00:30:48.063000 audit[4151]: NETFILTER_CFG table=filter:112 family=2 entries=15 op=nft_register_rule pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:48.063000 audit[4151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc3226250 a2=0 a3=1 items=0 ppid=2095 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.071395 kernel: audit: type=1325 audit(1752107448.063:1305): table=filter:112 family=2 entries=15 op=nft_register_rule pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:48.071460 kernel: audit: type=1300 audit(1752107448.063:1305): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc3226250 a2=0 a3=1 items=0 ppid=2095 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.071484 kernel: audit: type=1327 audit(1752107448.063:1305): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:48.063000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:48.073000 audit[4151]: NETFILTER_CFG table=nat:113 family=2 entries=37 op=nft_register_chain pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:48.073000 audit[4151]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffc3226250 a2=0 a3=1 items=0 ppid=2095 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.078364 kernel: audit: type=1325 audit(1752107448.073:1306): table=nat:113 family=2 entries=37 op=nft_register_chain pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:48.073000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:47.951 [INFO][4124] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0 calico-apiserver-78b48786cd- calico-apiserver 3945e138-23ea-4e40-b276-0e4f1b6cde2f 1019 0 2025-07-10 00:30:20 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:78b48786cd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-78b48786cd-sstd6 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic26c760bb11 [] [] }} ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-sstd6" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--sstd6-" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:47.951 [INFO][4124] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-sstd6" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:47.991 [INFO][4140] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" HandleID="k8s-pod-network.696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:47.991 [INFO][4140] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" HandleID="k8s-pod-network.696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40003b4330), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-78b48786cd-sstd6", "timestamp":"2025-07-10 00:30:47.991220333 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:47.991 [INFO][4140] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:47.991 [INFO][4140] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:47.991 [INFO][4140] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.012 [INFO][4140] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" host="localhost" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.019 [INFO][4140] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.028 [INFO][4140] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.031 [INFO][4140] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.037 [INFO][4140] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.037 [INFO][4140] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" host="localhost" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.043 [INFO][4140] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8 Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.047 [INFO][4140] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" host="localhost" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.056 [INFO][4140] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" host="localhost" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.056 [INFO][4140] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" host="localhost" Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.056 [INFO][4140] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:48.078933 env[1221]: 2025-07-10 00:30:48.056 [INFO][4140] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" HandleID="k8s-pod-network.696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:48.079477 env[1221]: 2025-07-10 00:30:48.059 [INFO][4124] cni-plugin/k8s.go 418: Populated endpoint ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-sstd6" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0", GenerateName:"calico-apiserver-78b48786cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"3945e138-23ea-4e40-b276-0e4f1b6cde2f", ResourceVersion:"1019", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b48786cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-78b48786cd-sstd6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic26c760bb11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:48.079477 env[1221]: 2025-07-10 00:30:48.059 [INFO][4124] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-sstd6" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:48.079477 env[1221]: 2025-07-10 00:30:48.059 [INFO][4124] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic26c760bb11 ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-sstd6" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:48.079477 env[1221]: 2025-07-10 00:30:48.063 [INFO][4124] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-sstd6" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:48.079477 env[1221]: 2025-07-10 00:30:48.064 [INFO][4124] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-sstd6" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0", GenerateName:"calico-apiserver-78b48786cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"3945e138-23ea-4e40-b276-0e4f1b6cde2f", ResourceVersion:"1019", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b48786cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8", Pod:"calico-apiserver-78b48786cd-sstd6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic26c760bb11", MAC:"82:f6:86:62:f5:86", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:48.079477 env[1221]: 2025-07-10 00:30:48.074 [INFO][4124] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8" Namespace="calico-apiserver" Pod="calico-apiserver-78b48786cd-sstd6" WorkloadEndpoint="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:30:48.088000 audit[4162]: NETFILTER_CFG table=filter:114 family=2 entries=55 op=nft_register_chain pid=4162 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:48.088000 audit[4162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28304 a0=3 a1=ffffcb03c7b0 a2=0 a3=ffff9eee6fa8 items=0 ppid=3310 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.088000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:48.105838 env[1221]: time="2025-07-10T00:30:48.105667025Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:48.105838 env[1221]: time="2025-07-10T00:30:48.105707545Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:48.105838 env[1221]: time="2025-07-10T00:30:48.105717106Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:48.106151 env[1221]: time="2025-07-10T00:30:48.106080471Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8 pid=4169 runtime=io.containerd.runc.v2 Jul 10 00:30:48.126366 systemd[1]: run-containerd-runc-k8s.io-696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8-runc.iie5In.mount: Deactivated successfully. Jul 10 00:30:48.129292 systemd[1]: Started cri-containerd-696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8.scope. Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit: BPF prog-id=196 op=LOAD Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639366562663037306364623130343731383139633564326434376331 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639366562663037306364623130343731383139633564326434376331 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit: BPF prog-id=197 op=LOAD Jul 10 00:30:48.149000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639366562663037306364623130343731383139633564326434376331 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.149000 audit: BPF prog-id=198 op=LOAD Jul 10 00:30:48.149000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639366562663037306364623130343731383139633564326434376331 Jul 10 00:30:48.149000 audit: BPF prog-id=198 op=UNLOAD Jul 10 00:30:48.150000 audit: BPF prog-id=197 op=UNLOAD Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { perfmon } for pid=4179 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit[4179]: AVC avc: denied { bpf } for pid=4179 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.150000 audit: BPF prog-id=199 op=LOAD Jul 10 00:30:48.150000 audit[4179]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4169 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.150000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3639366562663037306364623130343731383139633564326434376331 Jul 10 00:30:48.151894 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:30:48.170326 env[1221]: time="2025-07-10T00:30:48.170276765Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-78b48786cd-sstd6,Uid:3945e138-23ea-4e40-b276-0e4f1b6cde2f,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8\"" Jul 10 00:30:48.612297 env[1221]: time="2025-07-10T00:30:48.612242385Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:48.614242 env[1221]: time="2025-07-10T00:30:48.614210616Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:48.615474 env[1221]: time="2025-07-10T00:30:48.615447316Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:48.617227 env[1221]: time="2025-07-10T00:30:48.617196703Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:48.617723 env[1221]: time="2025-07-10T00:30:48.617693791Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 10 00:30:48.618721 env[1221]: time="2025-07-10T00:30:48.618691167Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 00:30:48.620698 env[1221]: time="2025-07-10T00:30:48.620669318Z" level=info msg="CreateContainer within sandbox \"7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:30:48.630990 env[1221]: time="2025-07-10T00:30:48.630935960Z" level=info msg="CreateContainer within sandbox \"7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"34fa31b245a57afac6226e757c2b31e607a91053fd6541b65f6f69d20cb7f211\"" Jul 10 00:30:48.631452 env[1221]: time="2025-07-10T00:30:48.631421128Z" level=info msg="StartContainer for \"34fa31b245a57afac6226e757c2b31e607a91053fd6541b65f6f69d20cb7f211\"" Jul 10 00:30:48.645288 systemd[1]: Started cri-containerd-34fa31b245a57afac6226e757c2b31e607a91053fd6541b65f6f69d20cb7f211.scope. Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit: BPF prog-id=200 op=LOAD Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3804 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334666133316232343561353761666163363232366537353763326233 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3804 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334666133316232343561353761666163363232366537353763326233 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.674000 audit: BPF prog-id=201 op=LOAD Jul 10 00:30:48.674000 audit[4208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3804 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334666133316232343561353761666163363232366537353763326233 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit: BPF prog-id=202 op=LOAD Jul 10 00:30:48.675000 audit[4208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3804 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334666133316232343561353761666163363232366537353763326233 Jul 10 00:30:48.675000 audit: BPF prog-id=202 op=UNLOAD Jul 10 00:30:48.675000 audit: BPF prog-id=201 op=UNLOAD Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { perfmon } for pid=4208 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit[4208]: AVC avc: denied { bpf } for pid=4208 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:48.675000 audit: BPF prog-id=203 op=LOAD Jul 10 00:30:48.675000 audit[4208]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3804 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:48.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3334666133316232343561353761666163363232366537353763326233 Jul 10 00:30:48.693878 env[1221]: time="2025-07-10T00:30:48.693831074Z" level=info msg="StartContainer for \"34fa31b245a57afac6226e757c2b31e607a91053fd6541b65f6f69d20cb7f211\" returns successfully" Jul 10 00:30:48.831438 env[1221]: time="2025-07-10T00:30:48.831397726Z" level=info msg="StopPodSandbox for \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\"" Jul 10 00:30:48.831683 env[1221]: time="2025-07-10T00:30:48.831397766Z" level=info msg="StopPodSandbox for \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\"" Jul 10 00:30:48.831791 env[1221]: time="2025-07-10T00:30:48.831397926Z" level=info msg="StopPodSandbox for \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\"" Jul 10 00:30:48.851472 systemd-networkd[1044]: cali939a2262830: Gained IPv6LL Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.900 [INFO][4277] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.901 [INFO][4277] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" iface="eth0" netns="/var/run/netns/cni-2b553cf3-85bd-bdb1-d52b-3a9a19f97cb3" Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.901 [INFO][4277] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" iface="eth0" netns="/var/run/netns/cni-2b553cf3-85bd-bdb1-d52b-3a9a19f97cb3" Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.901 [INFO][4277] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" iface="eth0" netns="/var/run/netns/cni-2b553cf3-85bd-bdb1-d52b-3a9a19f97cb3" Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.901 [INFO][4277] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.901 [INFO][4277] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.937 [INFO][4300] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" HandleID="k8s-pod-network.86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.937 [INFO][4300] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.937 [INFO][4300] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.951 [WARNING][4300] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" HandleID="k8s-pod-network.86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.951 [INFO][4300] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" HandleID="k8s-pod-network.86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.953 [INFO][4300] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:48.963404 env[1221]: 2025-07-10 00:30:48.958 [INFO][4277] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:30:48.963404 env[1221]: time="2025-07-10T00:30:48.961527221Z" level=info msg="TearDown network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\" successfully" Jul 10 00:30:48.963404 env[1221]: time="2025-07-10T00:30:48.961562022Z" level=info msg="StopPodSandbox for \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\" returns successfully" Jul 10 00:30:48.964403 systemd[1]: run-netns-cni\x2d2b553cf3\x2d85bd\x2dbdb1\x2dd52b\x2d3a9a19f97cb3.mount: Deactivated successfully. Jul 10 00:30:48.966145 env[1221]: time="2025-07-10T00:30:48.966108414Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tx2lp,Uid:dc1f8e65-fe86-487d-86ca-ba8db7978167,Namespace:calico-system,Attempt:1,}" Jul 10 00:30:48.979765 systemd-networkd[1044]: calicbea1a66572: Gained IPv6LL Jul 10 00:30:49.010353 kubelet[1946]: E0710 00:30:49.006105 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:48.913 [INFO][4278] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:48.913 [INFO][4278] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" iface="eth0" netns="/var/run/netns/cni-8d7b49a1-cafe-783d-ef88-1722b0ba54db" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:48.913 [INFO][4278] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" iface="eth0" netns="/var/run/netns/cni-8d7b49a1-cafe-783d-ef88-1722b0ba54db" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:48.914 [INFO][4278] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" iface="eth0" netns="/var/run/netns/cni-8d7b49a1-cafe-783d-ef88-1722b0ba54db" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:48.914 [INFO][4278] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:48.914 [INFO][4278] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:48.955 [INFO][4307] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" HandleID="k8s-pod-network.bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:48.955 [INFO][4307] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:48.955 [INFO][4307] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:49.001 [WARNING][4307] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" HandleID="k8s-pod-network.bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:49.001 [INFO][4307] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" HandleID="k8s-pod-network.bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:49.010 [INFO][4307] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:49.026753 env[1221]: 2025-07-10 00:30:49.015 [INFO][4278] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:30:49.029296 systemd[1]: run-netns-cni\x2d8d7b49a1\x2dcafe\x2d783d\x2def88\x2d1722b0ba54db.mount: Deactivated successfully. Jul 10 00:30:49.029986 env[1221]: time="2025-07-10T00:30:49.029941851Z" level=info msg="TearDown network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\" successfully" Jul 10 00:30:49.030092 env[1221]: time="2025-07-10T00:30:49.030073213Z" level=info msg="StopPodSandbox for \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\" returns successfully" Jul 10 00:30:49.030482 kubelet[1946]: E0710 00:30:49.030446 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:49.031143 env[1221]: time="2025-07-10T00:30:49.031099389Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-ww9zc,Uid:6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095,Namespace:kube-system,Attempt:1,}" Jul 10 00:30:49.039000 audit[4337]: NETFILTER_CFG table=filter:115 family=2 entries=12 op=nft_register_rule pid=4337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:49.039000 audit[4337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd256ed60 a2=0 a3=1 items=0 ppid=2095 pid=4337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.039000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:49.044000 audit[4337]: NETFILTER_CFG table=nat:116 family=2 entries=22 op=nft_register_rule pid=4337 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:49.044000 audit[4337]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd256ed60 a2=0 a3=1 items=0 ppid=2095 pid=4337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.044000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:48.924 [INFO][4279] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:48.924 [INFO][4279] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" iface="eth0" netns="/var/run/netns/cni-813693b7-2b48-0869-d879-8e62f9ff9f9e" Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:48.925 [INFO][4279] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" iface="eth0" netns="/var/run/netns/cni-813693b7-2b48-0869-d879-8e62f9ff9f9e" Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:48.925 [INFO][4279] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" iface="eth0" netns="/var/run/netns/cni-813693b7-2b48-0869-d879-8e62f9ff9f9e" Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:48.925 [INFO][4279] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:48.925 [INFO][4279] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:48.970 [INFO][4314] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" HandleID="k8s-pod-network.66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:48.971 [INFO][4314] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:49.010 [INFO][4314] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:49.031 [WARNING][4314] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" HandleID="k8s-pod-network.66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:49.031 [INFO][4314] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" HandleID="k8s-pod-network.66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:49.034 [INFO][4314] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:49.048466 env[1221]: 2025-07-10 00:30:49.043 [INFO][4279] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:30:49.048888 env[1221]: time="2025-07-10T00:30:49.048630139Z" level=info msg="TearDown network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\" successfully" Jul 10 00:30:49.048888 env[1221]: time="2025-07-10T00:30:49.048673940Z" level=info msg="StopPodSandbox for \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\" returns successfully" Jul 10 00:30:49.049427 env[1221]: time="2025-07-10T00:30:49.049386111Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-b9rrv,Uid:32d2ba57-5ec9-4de3-ac76-468515e5b7b3,Namespace:calico-system,Attempt:1,}" Jul 10 00:30:49.171457 systemd-networkd[1044]: calic26c760bb11: Gained IPv6LL Jul 10 00:30:49.209252 systemd-networkd[1044]: cali051616c4cf3: Link UP Jul 10 00:30:49.210159 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:30:49.210214 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali051616c4cf3: link becomes ready Jul 10 00:30:49.210278 systemd-networkd[1044]: cali051616c4cf3: Gained carrier Jul 10 00:30:49.224709 kubelet[1946]: I0710 00:30:49.224428 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-78b48786cd-czw7r" podStartSLOduration=26.740508313 podStartE2EDuration="29.22440085s" podCreationTimestamp="2025-07-10 00:30:20 +0000 UTC" firstStartedPulling="2025-07-10 00:30:46.134640068 +0000 UTC m=+41.394842722" lastFinishedPulling="2025-07-10 00:30:48.618532645 +0000 UTC m=+43.878735259" observedRunningTime="2025-07-10 00:30:49.01884248 +0000 UTC m=+44.279045134" watchObservedRunningTime="2025-07-10 00:30:49.22440085 +0000 UTC m=+44.484603504" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.091 [INFO][4325] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--tx2lp-eth0 csi-node-driver- calico-system dc1f8e65-fe86-487d-86ca-ba8db7978167 1041 0 2025-07-10 00:30:25 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-tx2lp eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali051616c4cf3 [] [] }} ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Namespace="calico-system" Pod="csi-node-driver-tx2lp" WorkloadEndpoint="localhost-k8s-csi--node--driver--tx2lp-" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.091 [INFO][4325] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Namespace="calico-system" Pod="csi-node-driver-tx2lp" WorkloadEndpoint="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.135 [INFO][4371] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" HandleID="k8s-pod-network.1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.135 [INFO][4371] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" HandleID="k8s-pod-network.1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dd5f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-tx2lp", "timestamp":"2025-07-10 00:30:49.135158914 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.135 [INFO][4371] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.135 [INFO][4371] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.135 [INFO][4371] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.144 [INFO][4371] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" host="localhost" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.149 [INFO][4371] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.156 [INFO][4371] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.158 [INFO][4371] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.162 [INFO][4371] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.162 [INFO][4371] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" host="localhost" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.163 [INFO][4371] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6 Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.178 [INFO][4371] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" host="localhost" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.202 [INFO][4371] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" host="localhost" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.202 [INFO][4371] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" host="localhost" Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.202 [INFO][4371] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:49.233489 env[1221]: 2025-07-10 00:30:49.202 [INFO][4371] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" HandleID="k8s-pod-network.1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:49.234184 env[1221]: 2025-07-10 00:30:49.206 [INFO][4325] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Namespace="calico-system" Pod="csi-node-driver-tx2lp" WorkloadEndpoint="localhost-k8s-csi--node--driver--tx2lp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tx2lp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"dc1f8e65-fe86-487d-86ca-ba8db7978167", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-tx2lp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali051616c4cf3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:49.234184 env[1221]: 2025-07-10 00:30:49.206 [INFO][4325] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Namespace="calico-system" Pod="csi-node-driver-tx2lp" WorkloadEndpoint="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:49.234184 env[1221]: 2025-07-10 00:30:49.206 [INFO][4325] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali051616c4cf3 ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Namespace="calico-system" Pod="csi-node-driver-tx2lp" WorkloadEndpoint="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:49.234184 env[1221]: 2025-07-10 00:30:49.213 [INFO][4325] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Namespace="calico-system" Pod="csi-node-driver-tx2lp" WorkloadEndpoint="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:49.234184 env[1221]: 2025-07-10 00:30:49.214 [INFO][4325] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Namespace="calico-system" Pod="csi-node-driver-tx2lp" WorkloadEndpoint="localhost-k8s-csi--node--driver--tx2lp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tx2lp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"dc1f8e65-fe86-487d-86ca-ba8db7978167", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6", Pod:"csi-node-driver-tx2lp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali051616c4cf3", MAC:"0e:aa:b4:2d:e4:b2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:49.234184 env[1221]: 2025-07-10 00:30:49.223 [INFO][4325] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6" Namespace="calico-system" Pod="csi-node-driver-tx2lp" WorkloadEndpoint="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:30:49.237000 audit[4405]: NETFILTER_CFG table=filter:117 family=2 entries=48 op=nft_register_chain pid=4405 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:49.237000 audit[4405]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23124 a0=3 a1=fffff662b030 a2=0 a3=ffff844adfa8 items=0 ppid=3310 pid=4405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.237000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:49.244496 env[1221]: time="2025-07-10T00:30:49.244428559Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:49.244496 env[1221]: time="2025-07-10T00:30:49.244476960Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:49.244496 env[1221]: time="2025-07-10T00:30:49.244487840Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:49.245502 env[1221]: time="2025-07-10T00:30:49.245000248Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6 pid=4413 runtime=io.containerd.runc.v2 Jul 10 00:30:49.266638 systemd[1]: Started cri-containerd-1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6.scope. Jul 10 00:30:49.300414 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidf127ad4673: link becomes ready Jul 10 00:30:49.300920 systemd-networkd[1044]: calidf127ad4673: Link UP Jul 10 00:30:49.301134 systemd-networkd[1044]: calidf127ad4673: Gained carrier Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.107 [INFO][4341] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0 coredns-7c65d6cfc9- kube-system 6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095 1042 0 2025-07-10 00:30:11 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-ww9zc eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calidf127ad4673 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ww9zc" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--ww9zc-" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.107 [INFO][4341] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ww9zc" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.155 [INFO][4378] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" HandleID="k8s-pod-network.85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.155 [INFO][4378] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" HandleID="k8s-pod-network.85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004cc10), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-ww9zc", "timestamp":"2025-07-10 00:30:49.15501698 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.155 [INFO][4378] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.202 [INFO][4378] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.203 [INFO][4378] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.246 [INFO][4378] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" host="localhost" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.250 [INFO][4378] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.257 [INFO][4378] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.262 [INFO][4378] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.267 [INFO][4378] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.267 [INFO][4378] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" host="localhost" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.269 [INFO][4378] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06 Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.275 [INFO][4378] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" host="localhost" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.285 [INFO][4378] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" host="localhost" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.285 [INFO][4378] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" host="localhost" Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.285 [INFO][4378] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:49.330476 env[1221]: 2025-07-10 00:30:49.285 [INFO][4378] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" HandleID="k8s-pod-network.85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.331515 env[1221]: 2025-07-10 00:30:49.290 [INFO][4341] cni-plugin/k8s.go 418: Populated endpoint ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ww9zc" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095", ResourceVersion:"1042", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-ww9zc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidf127ad4673", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:49.331515 env[1221]: 2025-07-10 00:30:49.290 [INFO][4341] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ww9zc" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.331515 env[1221]: 2025-07-10 00:30:49.290 [INFO][4341] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidf127ad4673 ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ww9zc" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.331515 env[1221]: 2025-07-10 00:30:49.301 [INFO][4341] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ww9zc" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.331515 env[1221]: 2025-07-10 00:30:49.303 [INFO][4341] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ww9zc" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095", ResourceVersion:"1042", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06", Pod:"coredns-7c65d6cfc9-ww9zc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidf127ad4673", MAC:"c2:51:fe:76:4d:08", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:49.331515 env[1221]: 2025-07-10 00:30:49.324 [INFO][4341] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06" Namespace="kube-system" Pod="coredns-7c65d6cfc9-ww9zc" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:30:49.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit: BPF prog-id=204 op=LOAD Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001b3b38 a2=10 a3=0 items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136353462666131386339363066666233376566353130393161666265 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001b35a0 a2=3c a3=0 items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136353462666131386339363066666233376566353130393161666265 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit: BPF prog-id=205 op=LOAD Jul 10 00:30:49.341000 audit[4422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001b38e0 a2=78 a3=0 items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136353462666131386339363066666233376566353130393161666265 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit: BPF prog-id=206 op=LOAD Jul 10 00:30:49.341000 audit[4422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001b3670 a2=78 a3=0 items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136353462666131386339363066666233376566353130393161666265 Jul 10 00:30:49.341000 audit: BPF prog-id=206 op=UNLOAD Jul 10 00:30:49.341000 audit: BPF prog-id=205 op=UNLOAD Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { perfmon } for pid=4422 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit[4422]: AVC avc: denied { bpf } for pid=4422 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.341000 audit: BPF prog-id=207 op=LOAD Jul 10 00:30:49.341000 audit[4422]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001b3b40 a2=78 a3=0 items=0 ppid=4413 pid=4422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.341000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136353462666131386339363066666233376566353130393161666265 Jul 10 00:30:49.342000 audit[4449]: NETFILTER_CFG table=filter:118 family=2 entries=48 op=nft_register_chain pid=4449 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:49.342000 audit[4449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=22704 a0=3 a1=ffffc4ab6c90 a2=0 a3=ffffafc0bfa8 items=0 ppid=3310 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.342000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:49.343804 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:30:49.355870 env[1221]: time="2025-07-10T00:30:49.355054065Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:49.355870 env[1221]: time="2025-07-10T00:30:49.355109466Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:49.355870 env[1221]: time="2025-07-10T00:30:49.355119786Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:49.355870 env[1221]: time="2025-07-10T00:30:49.355359830Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06 pid=4456 runtime=io.containerd.runc.v2 Jul 10 00:30:49.370710 env[1221]: time="2025-07-10T00:30:49.370664666Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-tx2lp,Uid:dc1f8e65-fe86-487d-86ca-ba8db7978167,Namespace:calico-system,Attempt:1,} returns sandbox id \"1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6\"" Jul 10 00:30:49.382785 systemd[1]: Started cri-containerd-85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06.scope. Jul 10 00:30:49.404146 systemd-networkd[1044]: calidcdac3503cf: Link UP Jul 10 00:30:49.405456 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calidcdac3503cf: link becomes ready Jul 10 00:30:49.405623 systemd-networkd[1044]: calidcdac3503cf: Gained carrier Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.412000 audit: BPF prog-id=208 op=LOAD Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4456 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835373436626433653031626265643165663061316130613561663362 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4456 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835373436626433653031626265643165663061316130613561663362 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit: BPF prog-id=209 op=LOAD Jul 10 00:30:49.413000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4456 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835373436626433653031626265643165663061316130613561663362 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit: BPF prog-id=210 op=LOAD Jul 10 00:30:49.413000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4456 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835373436626433653031626265643165663061316130613561663362 Jul 10 00:30:49.413000 audit: BPF prog-id=210 op=UNLOAD Jul 10 00:30:49.413000 audit: BPF prog-id=209 op=UNLOAD Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { perfmon } for pid=4468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit[4468]: AVC avc: denied { bpf } for pid=4468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.413000 audit: BPF prog-id=211 op=LOAD Jul 10 00:30:49.413000 audit[4468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4456 pid=4468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3835373436626433653031626265643165663061316130613561663362 Jul 10 00:30:49.416482 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:30:49.441095 env[1221]: time="2025-07-10T00:30:49.441038391Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-ww9zc,Uid:6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095,Namespace:kube-system,Attempt:1,} returns sandbox id \"85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06\"" Jul 10 00:30:49.442938 kubelet[1946]: E0710 00:30:49.441896 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:49.444070 env[1221]: time="2025-07-10T00:30:49.444037237Z" level=info msg="CreateContainer within sandbox \"85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.123 [INFO][4353] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0 goldmane-58fd7646b9- calico-system 32d2ba57-5ec9-4de3-ac76-468515e5b7b3 1043 0 2025-07-10 00:30:25 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-b9rrv eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calidcdac3503cf [] [] }} ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Namespace="calico-system" Pod="goldmane-58fd7646b9-b9rrv" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--b9rrv-" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.123 [INFO][4353] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Namespace="calico-system" Pod="goldmane-58fd7646b9-b9rrv" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.185 [INFO][4386] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" HandleID="k8s-pod-network.7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.185 [INFO][4386] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" HandleID="k8s-pod-network.7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40005a0e30), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-b9rrv", "timestamp":"2025-07-10 00:30:49.185651972 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.185 [INFO][4386] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.285 [INFO][4386] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.285 [INFO][4386] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.348 [INFO][4386] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" host="localhost" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.353 [INFO][4386] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.358 [INFO][4386] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.360 [INFO][4386] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.363 [INFO][4386] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.363 [INFO][4386] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" host="localhost" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.365 [INFO][4386] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.375 [INFO][4386] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" host="localhost" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.398 [INFO][4386] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" host="localhost" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.398 [INFO][4386] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" host="localhost" Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.398 [INFO][4386] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:30:49.454526 env[1221]: 2025-07-10 00:30:49.398 [INFO][4386] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" HandleID="k8s-pod-network.7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.455086 env[1221]: 2025-07-10 00:30:49.401 [INFO][4353] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Namespace="calico-system" Pod="goldmane-58fd7646b9-b9rrv" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"32d2ba57-5ec9-4de3-ac76-468515e5b7b3", ResourceVersion:"1043", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-b9rrv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidcdac3503cf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:49.455086 env[1221]: 2025-07-10 00:30:49.402 [INFO][4353] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Namespace="calico-system" Pod="goldmane-58fd7646b9-b9rrv" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.455086 env[1221]: 2025-07-10 00:30:49.402 [INFO][4353] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calidcdac3503cf ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Namespace="calico-system" Pod="goldmane-58fd7646b9-b9rrv" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.455086 env[1221]: 2025-07-10 00:30:49.405 [INFO][4353] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Namespace="calico-system" Pod="goldmane-58fd7646b9-b9rrv" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.455086 env[1221]: 2025-07-10 00:30:49.405 [INFO][4353] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Namespace="calico-system" Pod="goldmane-58fd7646b9-b9rrv" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"32d2ba57-5ec9-4de3-ac76-468515e5b7b3", ResourceVersion:"1043", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c", Pod:"goldmane-58fd7646b9-b9rrv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidcdac3503cf", MAC:"0a:89:53:5c:de:e0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:30:49.455086 env[1221]: 2025-07-10 00:30:49.448 [INFO][4353] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c" Namespace="calico-system" Pod="goldmane-58fd7646b9-b9rrv" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:30:49.464000 audit[4508]: NETFILTER_CFG table=filter:119 family=2 entries=70 op=nft_register_chain pid=4508 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:30:49.464000 audit[4508]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=33956 a0=3 a1=ffffcc43af30 a2=0 a3=ffffb29f5fa8 items=0 ppid=3310 pid=4508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.464000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:30:49.529987 env[1221]: time="2025-07-10T00:30:49.529847160Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:30:49.529987 env[1221]: time="2025-07-10T00:30:49.529893881Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:30:49.532804 env[1221]: time="2025-07-10T00:30:49.529905161Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:30:49.532804 env[1221]: time="2025-07-10T00:30:49.530079724Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c pid=4516 runtime=io.containerd.runc.v2 Jul 10 00:30:49.542422 systemd[1]: Started cri-containerd-7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c.scope. Jul 10 00:30:49.543070 env[1221]: time="2025-07-10T00:30:49.542570236Z" level=info msg="CreateContainer within sandbox \"85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"335945ce650d3a7ec93332c6e51c0854a7cdfef7594227908ddffd8bba2688b4\"" Jul 10 00:30:49.543799 env[1221]: time="2025-07-10T00:30:49.543711574Z" level=info msg="StartContainer for \"335945ce650d3a7ec93332c6e51c0854a7cdfef7594227908ddffd8bba2688b4\"" Jul 10 00:30:49.570198 systemd[1]: Started cri-containerd-335945ce650d3a7ec93332c6e51c0854a7cdfef7594227908ddffd8bba2688b4.scope. Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.575000 audit: BPF prog-id=212 op=LOAD Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4516 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633837303935643162396538616462663730613438616639373566 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4516 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633837303935643162396538616462663730613438616639373566 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.576000 audit: BPF prog-id=213 op=LOAD Jul 10 00:30:49.576000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4516 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633837303935643162396538616462663730613438616639373566 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit: BPF prog-id=214 op=LOAD Jul 10 00:30:49.577000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4516 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633837303935643162396538616462663730613438616639373566 Jul 10 00:30:49.577000 audit: BPF prog-id=214 op=UNLOAD Jul 10 00:30:49.577000 audit: BPF prog-id=213 op=UNLOAD Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { perfmon } for pid=4525 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit[4525]: AVC avc: denied { bpf } for pid=4525 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.577000 audit: BPF prog-id=215 op=LOAD Jul 10 00:30:49.577000 audit[4525]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4516 pid=4525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.577000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633837303935643162396538616462663730613438616639373566 Jul 10 00:30:49.584394 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.597000 audit: BPF prog-id=216 op=LOAD Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4456 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353934356365363530643361376563393333333263366535316330 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4456 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353934356365363530643361376563393333333263366535316330 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit: BPF prog-id=217 op=LOAD Jul 10 00:30:49.602000 audit[4548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4456 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353934356365363530643361376563393333333263366535316330 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.602000 audit: BPF prog-id=218 op=LOAD Jul 10 00:30:49.602000 audit[4548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4456 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.602000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353934356365363530643361376563393333333263366535316330 Jul 10 00:30:49.604000 audit: BPF prog-id=218 op=UNLOAD Jul 10 00:30:49.604000 audit: BPF prog-id=217 op=UNLOAD Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { perfmon } for pid=4548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit[4548]: AVC avc: denied { bpf } for pid=4548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:49.604000 audit: BPF prog-id=219 op=LOAD Jul 10 00:30:49.604000 audit[4548]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4456 pid=4548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:49.604000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333353934356365363530643361376563393333333263366535316330 Jul 10 00:30:49.626899 env[1221]: time="2025-07-10T00:30:49.626860296Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-b9rrv,Uid:32d2ba57-5ec9-4de3-ac76-468515e5b7b3,Namespace:calico-system,Attempt:1,} returns sandbox id \"7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c\"" Jul 10 00:30:49.637056 env[1221]: time="2025-07-10T00:30:49.637013213Z" level=info msg="StartContainer for \"335945ce650d3a7ec93332c6e51c0854a7cdfef7594227908ddffd8bba2688b4\" returns successfully" Jul 10 00:30:49.652000 audit[4559]: AVC avc: denied { getattr } for pid=4559 comm="coredns" path="cgroup:[4026532543]" dev="nsfs" ino=4026532543 scontext=system_u:system_r:svirt_lxc_net_t:s0:c266,c471 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:30:49.652000 audit[4559]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000574810 a2=40000da578 a3=0 items=0 ppid=4456 pid=4559 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c266,c471 key=(null) Jul 10 00:30:49.652000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:30:49.960458 systemd[1]: run-netns-cni\x2d813693b7\x2d2b48\x2d0869\x2dd879\x2d8e62f9ff9f9e.mount: Deactivated successfully. Jul 10 00:30:50.010399 kubelet[1946]: E0710 00:30:50.010367 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:50.012973 kubelet[1946]: I0710 00:30:50.012948 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:30:50.043000 audit[4592]: NETFILTER_CFG table=filter:120 family=2 entries=12 op=nft_register_rule pid=4592 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:50.043000 audit[4592]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff6a00c00 a2=0 a3=1 items=0 ppid=2095 pid=4592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:50.043000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:50.049000 audit[4592]: NETFILTER_CFG table=nat:121 family=2 entries=46 op=nft_register_rule pid=4592 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:50.049000 audit[4592]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=fffff6a00c00 a2=0 a3=1 items=0 ppid=2095 pid=4592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:50.049000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:50.056706 kubelet[1946]: I0710 00:30:50.056648 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-ww9zc" podStartSLOduration=39.056622104 podStartE2EDuration="39.056622104s" podCreationTimestamp="2025-07-10 00:30:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:30:50.023930172 +0000 UTC m=+45.284132866" watchObservedRunningTime="2025-07-10 00:30:50.056622104 +0000 UTC m=+45.316824758" Jul 10 00:30:50.768500 env[1221]: time="2025-07-10T00:30:50.768447473Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:50.770469 env[1221]: time="2025-07-10T00:30:50.770419743Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:50.772016 env[1221]: time="2025-07-10T00:30:50.771989526Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:50.772421 systemd-networkd[1044]: calidcdac3503cf: Gained IPv6LL Jul 10 00:30:50.772657 systemd-networkd[1044]: calidf127ad4673: Gained IPv6LL Jul 10 00:30:50.774531 env[1221]: time="2025-07-10T00:30:50.774501804Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:50.775118 env[1221]: time="2025-07-10T00:30:50.775087773Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 10 00:30:50.777250 env[1221]: time="2025-07-10T00:30:50.777210645Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:30:50.790521 env[1221]: time="2025-07-10T00:30:50.790431324Z" level=info msg="CreateContainer within sandbox \"8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 00:30:50.805724 env[1221]: time="2025-07-10T00:30:50.805676514Z" level=info msg="CreateContainer within sandbox \"8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"d24637e7367e4dcd6fea63b07a17b2e455b6e953bdea9ae809a177dfc79d5f1b\"" Jul 10 00:30:50.809492 env[1221]: time="2025-07-10T00:30:50.809464251Z" level=info msg="StartContainer for \"d24637e7367e4dcd6fea63b07a17b2e455b6e953bdea9ae809a177dfc79d5f1b\"" Jul 10 00:30:50.825325 systemd[1]: Started cri-containerd-d24637e7367e4dcd6fea63b07a17b2e455b6e953bdea9ae809a177dfc79d5f1b.scope. Jul 10 00:30:50.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.854000 audit: BPF prog-id=220 op=LOAD Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3968 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:50.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343633376537333637653464636436666561363362303761313762 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3968 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:50.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343633376537333637653464636436666561363362303761313762 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.857000 audit: BPF prog-id=221 op=LOAD Jul 10 00:30:50.857000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3968 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:50.857000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343633376537333637653464636436666561363362303761313762 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit: BPF prog-id=222 op=LOAD Jul 10 00:30:50.858000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3968 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:50.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343633376537333637653464636436666561363362303761313762 Jul 10 00:30:50.858000 audit: BPF prog-id=222 op=UNLOAD Jul 10 00:30:50.858000 audit: BPF prog-id=221 op=UNLOAD Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { perfmon } for pid=4602 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit[4602]: AVC avc: denied { bpf } for pid=4602 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:50.858000 audit: BPF prog-id=223 op=LOAD Jul 10 00:30:50.858000 audit[4602]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3968 pid=4602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:50.858000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6432343633376537333637653464636436666561363362303761313762 Jul 10 00:30:50.883547 env[1221]: time="2025-07-10T00:30:50.883485527Z" level=info msg="StartContainer for \"d24637e7367e4dcd6fea63b07a17b2e455b6e953bdea9ae809a177dfc79d5f1b\" returns successfully" Jul 10 00:30:50.900042 systemd-networkd[1044]: cali051616c4cf3: Gained IPv6LL Jul 10 00:30:51.022778 kubelet[1946]: E0710 00:30:51.022395 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:51.067000 audit[4640]: NETFILTER_CFG table=filter:122 family=2 entries=12 op=nft_register_rule pid=4640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:51.067000 audit[4640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd3eaded0 a2=0 a3=1 items=0 ppid=2095 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:51.067000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:51.079000 audit[4640]: NETFILTER_CFG table=nat:123 family=2 entries=58 op=nft_register_chain pid=4640 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:51.079000 audit[4640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffd3eaded0 a2=0 a3=1 items=0 ppid=2095 pid=4640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:51.079000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:51.104493 env[1221]: time="2025-07-10T00:30:51.104446863Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:51.111286 env[1221]: time="2025-07-10T00:30:51.111241604Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:51.116750 env[1221]: time="2025-07-10T00:30:51.116697484Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:51.118575 env[1221]: time="2025-07-10T00:30:51.118539071Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:51.119285 env[1221]: time="2025-07-10T00:30:51.119246482Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 10 00:30:51.120740 env[1221]: time="2025-07-10T00:30:51.120700623Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 00:30:51.121612 env[1221]: time="2025-07-10T00:30:51.121580916Z" level=info msg="CreateContainer within sandbox \"696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:30:51.182853 env[1221]: time="2025-07-10T00:30:51.182801939Z" level=info msg="CreateContainer within sandbox \"696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"a81636517bef539cef0213249b7ad639fa2140585b7057d4eb812075a9f86009\"" Jul 10 00:30:51.183596 env[1221]: time="2025-07-10T00:30:51.183564630Z" level=info msg="StartContainer for \"a81636517bef539cef0213249b7ad639fa2140585b7057d4eb812075a9f86009\"" Jul 10 00:30:51.205321 systemd[1]: run-containerd-runc-k8s.io-a81636517bef539cef0213249b7ad639fa2140585b7057d4eb812075a9f86009-runc.3fTmJg.mount: Deactivated successfully. Jul 10 00:30:51.210072 systemd[1]: Started cri-containerd-a81636517bef539cef0213249b7ad639fa2140585b7057d4eb812075a9f86009.scope. Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.223000 audit: BPF prog-id=224 op=LOAD Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4169 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:51.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138313633363531376265663533396365663032313332343962376164 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4169 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:51.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138313633363531376265663533396365663032313332343962376164 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit: BPF prog-id=225 op=LOAD Jul 10 00:30:51.224000 audit[4652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4169 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:51.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138313633363531376265663533396365663032313332343962376164 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit: BPF prog-id=226 op=LOAD Jul 10 00:30:51.224000 audit[4652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4169 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:51.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138313633363531376265663533396365663032313332343962376164 Jul 10 00:30:51.224000 audit: BPF prog-id=226 op=UNLOAD Jul 10 00:30:51.224000 audit: BPF prog-id=225 op=UNLOAD Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { perfmon } for pid=4652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit[4652]: AVC avc: denied { bpf } for pid=4652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:51.224000 audit: BPF prog-id=227 op=LOAD Jul 10 00:30:51.224000 audit[4652]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4169 pid=4652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:51.224000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6138313633363531376265663533396365663032313332343962376164 Jul 10 00:30:51.248370 env[1221]: time="2025-07-10T00:30:51.248300144Z" level=info msg="StartContainer for \"a81636517bef539cef0213249b7ad639fa2140585b7057d4eb812075a9f86009\" returns successfully" Jul 10 00:30:51.397000 audit[4219]: AVC avc: denied { watch } for pid=4219 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_30_32.1709592964/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c318,c624 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c318,c624 tclass=file permissive=0 Jul 10 00:30:51.397000 audit[4219]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40010d1840 a2=fc6 a3=0 items=0 ppid=3804 pid=4219 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c318,c624 key=(null) Jul 10 00:30:51.397000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:30:52.026872 kubelet[1946]: I0710 00:30:52.026835 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:30:52.027924 kubelet[1946]: E0710 00:30:52.027890 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:30:52.050130 kubelet[1946]: I0710 00:30:52.050060 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-8b7698b4b-r27nc" podStartSLOduration=23.543272329 podStartE2EDuration="27.050043511s" podCreationTimestamp="2025-07-10 00:30:25 +0000 UTC" firstStartedPulling="2025-07-10 00:30:47.269643731 +0000 UTC m=+42.529846385" lastFinishedPulling="2025-07-10 00:30:50.776414953 +0000 UTC m=+46.036617567" observedRunningTime="2025-07-10 00:30:51.03845981 +0000 UTC m=+46.298662504" watchObservedRunningTime="2025-07-10 00:30:52.050043511 +0000 UTC m=+47.310246165" Jul 10 00:30:52.050298 kubelet[1946]: I0710 00:30:52.050162 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-78b48786cd-sstd6" podStartSLOduration=29.10196781 podStartE2EDuration="32.050157873s" podCreationTimestamp="2025-07-10 00:30:20 +0000 UTC" firstStartedPulling="2025-07-10 00:30:48.172224396 +0000 UTC m=+43.432427050" lastFinishedPulling="2025-07-10 00:30:51.120414459 +0000 UTC m=+46.380617113" observedRunningTime="2025-07-10 00:30:52.046199616 +0000 UTC m=+47.306402270" watchObservedRunningTime="2025-07-10 00:30:52.050157873 +0000 UTC m=+47.310360527" Jul 10 00:30:52.066000 audit[4687]: NETFILTER_CFG table=filter:124 family=2 entries=12 op=nft_register_rule pid=4687 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:52.066000 audit[4687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc1eaea80 a2=0 a3=1 items=0 ppid=2095 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:52.066000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:52.072000 audit[4687]: NETFILTER_CFG table=nat:125 family=2 entries=22 op=nft_register_rule pid=4687 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:52.072000 audit[4687]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffc1eaea80 a2=0 a3=1 items=0 ppid=2095 pid=4687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:52.072000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:52.193549 env[1221]: time="2025-07-10T00:30:52.193500542Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:52.195416 env[1221]: time="2025-07-10T00:30:52.195379050Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:52.197677 env[1221]: time="2025-07-10T00:30:52.197632362Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:52.199132 env[1221]: time="2025-07-10T00:30:52.199090743Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:52.199710 env[1221]: time="2025-07-10T00:30:52.199673272Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 10 00:30:52.201233 env[1221]: time="2025-07-10T00:30:52.201197334Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 00:30:52.202600 env[1221]: time="2025-07-10T00:30:52.202553233Z" level=info msg="CreateContainer within sandbox \"1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 00:30:52.222876 env[1221]: time="2025-07-10T00:30:52.222826406Z" level=info msg="CreateContainer within sandbox \"1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"4fe255f4dea85aaec5bec929bd407464ae33e8f668bee4e6de6cab2c2c52387a\"" Jul 10 00:30:52.223620 env[1221]: time="2025-07-10T00:30:52.223589897Z" level=info msg="StartContainer for \"4fe255f4dea85aaec5bec929bd407464ae33e8f668bee4e6de6cab2c2c52387a\"" Jul 10 00:30:52.282447 systemd[1]: run-containerd-runc-k8s.io-4fe255f4dea85aaec5bec929bd407464ae33e8f668bee4e6de6cab2c2c52387a-runc.t43xtR.mount: Deactivated successfully. Jul 10 00:30:52.290739 systemd[1]: Started cri-containerd-4fe255f4dea85aaec5bec929bd407464ae33e8f668bee4e6de6cab2c2c52387a.scope. Jul 10 00:30:52.309000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.46:22-10.0.0.1:46874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:52.311172 systemd[1]: Started sshd@9-10.0.0.46:22-10.0.0.1:46874.service. Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4413 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:52.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466653235356634646561383561616563356265633932396264343037 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.323000 audit: BPF prog-id=228 op=LOAD Jul 10 00:30:52.323000 audit[4695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4413 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:52.323000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466653235356634646561383561616563356265633932396264343037 Jul 10 00:30:52.324000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.324000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.324000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.324000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.324000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.324000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.324000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.324000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.324000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.324000 audit: BPF prog-id=229 op=LOAD Jul 10 00:30:52.324000 audit[4695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4413 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:52.324000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466653235356634646561383561616563356265633932396264343037 Jul 10 00:30:52.325000 audit: BPF prog-id=229 op=UNLOAD Jul 10 00:30:52.325000 audit: BPF prog-id=228 op=UNLOAD Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { perfmon } for pid=4695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit[4695]: AVC avc: denied { bpf } for pid=4695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:52.325000 audit: BPF prog-id=230 op=LOAD Jul 10 00:30:52.325000 audit[4695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4413 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:52.325000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3466653235356634646561383561616563356265633932396264343037 Jul 10 00:30:52.341833 env[1221]: time="2025-07-10T00:30:52.341775123Z" level=info msg="StartContainer for \"4fe255f4dea85aaec5bec929bd407464ae33e8f668bee4e6de6cab2c2c52387a\" returns successfully" Jul 10 00:30:52.364819 sshd[4711]: Accepted publickey for core from 10.0.0.1 port 46874 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:30:52.363000 audit[4711]: USER_ACCT pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.364000 audit[4711]: CRED_ACQ pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.364000 audit[4711]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe830b5c0 a2=3 a3=1 items=0 ppid=1 pid=4711 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:52.364000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:30:52.366864 sshd[4711]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:30:52.372395 systemd[1]: Started session-10.scope. Jul 10 00:30:52.372533 systemd-logind[1210]: New session 10 of user core. Jul 10 00:30:52.377000 audit[4711]: USER_START pid=4711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.379000 audit[4725]: CRED_ACQ pid=4725 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.616000 audit[4663]: AVC avc: denied { watch } for pid=4663 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_30_32.803657044/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c276,c641 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c276,c641 tclass=file permissive=0 Jul 10 00:30:52.616000 audit[4663]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400115b0a0 a2=fc6 a3=0 items=0 ppid=4169 pid=4663 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c276,c641 key=(null) Jul 10 00:30:52.616000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:30:52.709819 sshd[4711]: pam_unix(sshd:session): session closed for user core Jul 10 00:30:52.710000 audit[4711]: USER_END pid=4711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.710000 audit[4711]: CRED_DISP pid=4711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.46:22-10.0.0.1:35200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:52.713944 systemd[1]: Started sshd@10-10.0.0.46:22-10.0.0.1:35200.service. Jul 10 00:30:52.714447 systemd[1]: sshd@9-10.0.0.46:22-10.0.0.1:46874.service: Deactivated successfully. Jul 10 00:30:52.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.46:22-10.0.0.1:46874 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:52.715406 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 00:30:52.716142 systemd-logind[1210]: Session 10 logged out. Waiting for processes to exit. Jul 10 00:30:52.716897 systemd-logind[1210]: Removed session 10. Jul 10 00:30:52.775000 audit[4737]: USER_ACCT pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.777232 sshd[4737]: Accepted publickey for core from 10.0.0.1 port 35200 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:30:52.776000 audit[4737]: CRED_ACQ pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.776000 audit[4737]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9b427a0 a2=3 a3=1 items=0 ppid=1 pid=4737 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:52.776000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:30:52.778617 sshd[4737]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:30:52.782058 systemd-logind[1210]: New session 11 of user core. Jul 10 00:30:52.782985 systemd[1]: Started session-11.scope. Jul 10 00:30:52.786000 audit[4737]: USER_START pid=4737 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.787000 audit[4740]: CRED_ACQ pid=4740 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.967659 sshd[4737]: pam_unix(sshd:session): session closed for user core Jul 10 00:30:52.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.46:22-10.0.0.1:35204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:52.972295 systemd[1]: Started sshd@11-10.0.0.46:22-10.0.0.1:35204.service. Jul 10 00:30:52.972000 audit[4737]: USER_END pid=4737 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.973000 audit[4737]: CRED_DISP pid=4737 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:52.979254 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 00:30:52.979930 systemd[1]: sshd@10-10.0.0.46:22-10.0.0.1:35200.service: Deactivated successfully. Jul 10 00:30:52.978000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.46:22-10.0.0.1:35200 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:52.983219 systemd-logind[1210]: Session 11 logged out. Waiting for processes to exit. Jul 10 00:30:52.985180 systemd-logind[1210]: Removed session 11. Jul 10 00:30:53.030000 audit[4748]: USER_ACCT pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.032440 sshd[4748]: Accepted publickey for core from 10.0.0.1 port 35204 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:30:53.031000 audit[4748]: CRED_ACQ pid=4748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.032000 audit[4748]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9923e70 a2=3 a3=1 items=0 ppid=1 pid=4748 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:53.032000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:30:53.035786 sshd[4748]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:30:53.040898 systemd-logind[1210]: New session 12 of user core. Jul 10 00:30:53.041777 systemd[1]: Started session-12.scope. Jul 10 00:30:53.044000 audit[4748]: USER_START pid=4748 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.054464 kernel: kauditd_printk_skb: 574 callbacks suppressed Jul 10 00:30:53.055003 kernel: audit: type=1105 audit(1752107453.044:1494): pid=4748 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.055062 kernel: audit: type=1103 audit(1752107453.046:1495): pid=4751 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.046000 audit[4751]: CRED_ACQ pid=4751 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.085000 audit[4753]: NETFILTER_CFG table=filter:126 family=2 entries=11 op=nft_register_rule pid=4753 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:53.085000 audit[4753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdae6fa90 a2=0 a3=1 items=0 ppid=2095 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:53.097546 kernel: audit: type=1325 audit(1752107453.085:1496): table=filter:126 family=2 entries=11 op=nft_register_rule pid=4753 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:53.097647 kernel: audit: type=1300 audit(1752107453.085:1496): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdae6fa90 a2=0 a3=1 items=0 ppid=2095 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:53.097688 kernel: audit: type=1327 audit(1752107453.085:1496): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:53.085000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:53.100000 audit[4753]: NETFILTER_CFG table=nat:127 family=2 entries=29 op=nft_register_chain pid=4753 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:53.100000 audit[4753]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffdae6fa90 a2=0 a3=1 items=0 ppid=2095 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:53.118844 kernel: audit: type=1325 audit(1752107453.100:1497): table=nat:127 family=2 entries=29 op=nft_register_chain pid=4753 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:53.118953 kernel: audit: type=1300 audit(1752107453.100:1497): arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffdae6fa90 a2=0 a3=1 items=0 ppid=2095 pid=4753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:53.100000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:53.126255 kernel: audit: type=1327 audit(1752107453.100:1497): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:53.358395 sshd[4748]: pam_unix(sshd:session): session closed for user core Jul 10 00:30:53.358000 audit[4748]: USER_END pid=4748 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.358000 audit[4748]: CRED_DISP pid=4748 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.365789 systemd[1]: sshd@11-10.0.0.46:22-10.0.0.1:35204.service: Deactivated successfully. Jul 10 00:30:53.366608 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 00:30:53.368282 systemd-logind[1210]: Session 12 logged out. Waiting for processes to exit. Jul 10 00:30:53.368780 kernel: audit: type=1106 audit(1752107453.358:1498): pid=4748 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.368851 kernel: audit: type=1104 audit(1752107453.358:1499): pid=4748 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:53.364000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.46:22-10.0.0.1:35204 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:53.369727 systemd-logind[1210]: Removed session 12. Jul 10 00:30:53.866672 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3094976332.mount: Deactivated successfully. Jul 10 00:30:54.505220 env[1221]: time="2025-07-10T00:30:54.505172031Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:54.506664 env[1221]: time="2025-07-10T00:30:54.506626051Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:54.508618 env[1221]: time="2025-07-10T00:30:54.508586398Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:54.511864 env[1221]: time="2025-07-10T00:30:54.511833003Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:54.512712 env[1221]: time="2025-07-10T00:30:54.512682415Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 10 00:30:54.514228 env[1221]: time="2025-07-10T00:30:54.514094195Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 00:30:54.515456 env[1221]: time="2025-07-10T00:30:54.515425933Z" level=info msg="CreateContainer within sandbox \"7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 00:30:54.532702 env[1221]: time="2025-07-10T00:30:54.532653452Z" level=info msg="CreateContainer within sandbox \"7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"a307ea495538fe2fa047f9d82d02e43c35145920f143e9ec15e5c1658109d9fd\"" Jul 10 00:30:54.533793 env[1221]: time="2025-07-10T00:30:54.533765708Z" level=info msg="StartContainer for \"a307ea495538fe2fa047f9d82d02e43c35145920f143e9ec15e5c1658109d9fd\"" Jul 10 00:30:54.557104 systemd[1]: Started cri-containerd-a307ea495538fe2fa047f9d82d02e43c35145920f143e9ec15e5c1658109d9fd.scope. Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit: BPF prog-id=231 op=LOAD Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4516 pid=4772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:54.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133303765613439353533386665326661303437663964383264303265 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4516 pid=4772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:54.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133303765613439353533386665326661303437663964383264303265 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit: BPF prog-id=232 op=LOAD Jul 10 00:30:54.575000 audit[4772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4516 pid=4772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:54.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133303765613439353533386665326661303437663964383264303265 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.575000 audit: BPF prog-id=233 op=LOAD Jul 10 00:30:54.575000 audit[4772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4516 pid=4772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:54.575000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133303765613439353533386665326661303437663964383264303265 Jul 10 00:30:54.576000 audit: BPF prog-id=233 op=UNLOAD Jul 10 00:30:54.576000 audit: BPF prog-id=232 op=UNLOAD Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { perfmon } for pid=4772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit[4772]: AVC avc: denied { bpf } for pid=4772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:54.576000 audit: BPF prog-id=234 op=LOAD Jul 10 00:30:54.576000 audit[4772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4516 pid=4772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:54.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133303765613439353533386665326661303437663964383264303265 Jul 10 00:30:54.627218 env[1221]: time="2025-07-10T00:30:54.627157684Z" level=info msg="StartContainer for \"a307ea495538fe2fa047f9d82d02e43c35145920f143e9ec15e5c1658109d9fd\" returns successfully" Jul 10 00:30:55.065809 kubelet[1946]: I0710 00:30:55.065749 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-b9rrv" podStartSLOduration=25.183922821 podStartE2EDuration="30.065733156s" podCreationTimestamp="2025-07-10 00:30:25 +0000 UTC" firstStartedPulling="2025-07-10 00:30:49.632074817 +0000 UTC m=+44.892277471" lastFinishedPulling="2025-07-10 00:30:54.513885152 +0000 UTC m=+49.774087806" observedRunningTime="2025-07-10 00:30:55.065495273 +0000 UTC m=+50.325697927" watchObservedRunningTime="2025-07-10 00:30:55.065733156 +0000 UTC m=+50.325935770" Jul 10 00:30:55.075000 audit[4814]: NETFILTER_CFG table=filter:128 family=2 entries=10 op=nft_register_rule pid=4814 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:55.075000 audit[4814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffca981540 a2=0 a3=1 items=0 ppid=2095 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:55.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:55.083000 audit[4814]: NETFILTER_CFG table=nat:129 family=2 entries=24 op=nft_register_rule pid=4814 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:55.083000 audit[4814]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffca981540 a2=0 a3=1 items=0 ppid=2095 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:55.083000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:55.528423 systemd[1]: run-containerd-runc-k8s.io-a307ea495538fe2fa047f9d82d02e43c35145920f143e9ec15e5c1658109d9fd-runc.9v7Bdp.mount: Deactivated successfully. Jul 10 00:30:55.819796 env[1221]: time="2025-07-10T00:30:55.819689351Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:55.826723 env[1221]: time="2025-07-10T00:30:55.826674246Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:55.828605 env[1221]: time="2025-07-10T00:30:55.828573912Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:55.830591 env[1221]: time="2025-07-10T00:30:55.830561139Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:30:55.831049 env[1221]: time="2025-07-10T00:30:55.831015945Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 10 00:30:55.834062 env[1221]: time="2025-07-10T00:30:55.833988106Z" level=info msg="CreateContainer within sandbox \"1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 00:30:55.870771 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1045698484.mount: Deactivated successfully. Jul 10 00:30:55.872390 env[1221]: time="2025-07-10T00:30:55.872340629Z" level=info msg="CreateContainer within sandbox \"1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"ceacf92f534bf78f9ee35bc54822990f411f2d8ec601af56c18dff0ac2ace417\"" Jul 10 00:30:55.873088 env[1221]: time="2025-07-10T00:30:55.873050758Z" level=info msg="StartContainer for \"ceacf92f534bf78f9ee35bc54822990f411f2d8ec601af56c18dff0ac2ace417\"" Jul 10 00:30:55.874769 kubelet[1946]: I0710 00:30:55.874734 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:30:55.906637 systemd[1]: Started cri-containerd-ceacf92f534bf78f9ee35bc54822990f411f2d8ec601af56c18dff0ac2ace417.scope. Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4413 pid=4845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:55.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365616366393266353334626637386639656533356263353438323239 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.937000 audit: BPF prog-id=235 op=LOAD Jul 10 00:30:55.937000 audit[4845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4413 pid=4845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:55.937000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365616366393266353334626637386639656533356263353438323239 Jul 10 00:30:55.938000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.938000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.938000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.938000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.938000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.938000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.938000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.938000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.938000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.938000 audit: BPF prog-id=236 op=LOAD Jul 10 00:30:55.938000 audit[4845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4413 pid=4845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:55.938000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365616366393266353334626637386639656533356263353438323239 Jul 10 00:30:55.939000 audit: BPF prog-id=236 op=UNLOAD Jul 10 00:30:55.939000 audit: BPF prog-id=235 op=UNLOAD Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { perfmon } for pid=4845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit[4845]: AVC avc: denied { bpf } for pid=4845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:30:55.939000 audit: BPF prog-id=237 op=LOAD Jul 10 00:30:55.939000 audit[4845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4413 pid=4845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:55.939000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365616366393266353334626637386639656533356263353438323239 Jul 10 00:30:55.963271 env[1221]: time="2025-07-10T00:30:55.963220947Z" level=info msg="StartContainer for \"ceacf92f534bf78f9ee35bc54822990f411f2d8ec601af56c18dff0ac2ace417\" returns successfully" Jul 10 00:30:56.062331 kubelet[1946]: I0710 00:30:56.062249 1946 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-tx2lp" podStartSLOduration=24.602460292 podStartE2EDuration="31.062230482s" podCreationTimestamp="2025-07-10 00:30:25 +0000 UTC" firstStartedPulling="2025-07-10 00:30:49.372003646 +0000 UTC m=+44.632206300" lastFinishedPulling="2025-07-10 00:30:55.831773836 +0000 UTC m=+51.091976490" observedRunningTime="2025-07-10 00:30:56.061023066 +0000 UTC m=+51.321225720" watchObservedRunningTime="2025-07-10 00:30:56.062230482 +0000 UTC m=+51.322433136" Jul 10 00:30:56.903077 kubelet[1946]: I0710 00:30:56.903034 1946 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 00:30:56.907609 kubelet[1946]: I0710 00:30:56.907579 1946 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 00:30:57.063424 systemd[1]: run-containerd-runc-k8s.io-a307ea495538fe2fa047f9d82d02e43c35145920f143e9ec15e5c1658109d9fd-runc.18oWpw.mount: Deactivated successfully. Jul 10 00:30:58.362635 systemd[1]: Started sshd@12-10.0.0.46:22-10.0.0.1:35208.service. Jul 10 00:30:58.361000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.46:22-10.0.0.1:35208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:58.363768 kernel: kauditd_printk_skb: 107 callbacks suppressed Jul 10 00:30:58.363844 kernel: audit: type=1130 audit(1752107458.361:1527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.46:22-10.0.0.1:35208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:58.409000 audit[4960]: USER_ACCT pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.411163 sshd[4960]: Accepted publickey for core from 10.0.0.1 port 35208 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:30:58.412734 sshd[4960]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:30:58.410000 audit[4960]: CRED_ACQ pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.417794 kernel: audit: type=1101 audit(1752107458.409:1528): pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.417872 kernel: audit: type=1103 audit(1752107458.410:1529): pid=4960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.419622 systemd-logind[1210]: New session 13 of user core. Jul 10 00:30:58.420259 kernel: audit: type=1006 audit(1752107458.410:1530): pid=4960 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 10 00:30:58.420288 kernel: audit: type=1300 audit(1752107458.410:1530): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5314af0 a2=3 a3=1 items=0 ppid=1 pid=4960 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:58.410000 audit[4960]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5314af0 a2=3 a3=1 items=0 ppid=1 pid=4960 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:58.420494 systemd[1]: Started session-13.scope. Jul 10 00:30:58.410000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:30:58.424781 kernel: audit: type=1327 audit(1752107458.410:1530): proctitle=737368643A20636F7265205B707269765D Jul 10 00:30:58.423000 audit[4960]: USER_START pid=4960 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.428463 kernel: audit: type=1105 audit(1752107458.423:1531): pid=4960 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.427000 audit[4962]: CRED_ACQ pid=4962 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.431900 kernel: audit: type=1103 audit(1752107458.427:1532): pid=4962 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.655524 sshd[4960]: pam_unix(sshd:session): session closed for user core Jul 10 00:30:58.655000 audit[4960]: USER_END pid=4960 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.658861 systemd[1]: sshd@12-10.0.0.46:22-10.0.0.1:35208.service: Deactivated successfully. Jul 10 00:30:58.659772 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 00:30:58.660352 systemd-logind[1210]: Session 13 logged out. Waiting for processes to exit. Jul 10 00:30:58.655000 audit[4960]: CRED_DISP pid=4960 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.661012 systemd-logind[1210]: Removed session 13. Jul 10 00:30:58.663432 kernel: audit: type=1106 audit(1752107458.655:1533): pid=4960 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.663499 kernel: audit: type=1104 audit(1752107458.655:1534): pid=4960 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:30:58.657000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.46:22-10.0.0.1:35208 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:30:59.620087 kubelet[1946]: I0710 00:30:59.619340 1946 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:30:59.666000 audit[4975]: NETFILTER_CFG table=filter:130 family=2 entries=10 op=nft_register_rule pid=4975 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:59.666000 audit[4975]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffcfb6530 a2=0 a3=1 items=0 ppid=2095 pid=4975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:59.666000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:30:59.674000 audit[4975]: NETFILTER_CFG table=nat:131 family=2 entries=36 op=nft_register_chain pid=4975 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:30:59.674000 audit[4975]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=fffffcfb6530 a2=0 a3=1 items=0 ppid=2095 pid=4975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:30:59.674000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:01.893000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:01.893000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:01.893000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40022c0d20 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:31:01.893000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002d8d5e0 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:31:01.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:31:01.893000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:31:02.282000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:02.282000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=40116582a0 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:31:02.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:31:02.282000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:02.282000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=40132ea9e0 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:31:02.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:31:02.282000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:02.282000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=4011719470 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:31:02.282000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:31:02.292000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:02.292000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=4010d47680 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:31:02.292000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:31:02.292000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:02.292000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=40132eaa00 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:31:02.292000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:31:02.310000 audit[1819]: AVC avc: denied { watch } for pid=1819 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:02.310000 audit[1819]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=4010d47740 a2=fc6 a3=0 items=0 ppid=1663 pid=1819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c812,c886 key=(null) Jul 10 00:31:02.310000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3436002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:31:03.660000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.46:22-10.0.0.1:55358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:03.661380 systemd[1]: Started sshd@13-10.0.0.46:22-10.0.0.1:55358.service. Jul 10 00:31:03.664846 kernel: kauditd_printk_skb: 31 callbacks suppressed Jul 10 00:31:03.664966 kernel: audit: type=1130 audit(1752107463.660:1546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.46:22-10.0.0.1:55358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:03.712828 sshd[5005]: Accepted publickey for core from 10.0.0.1 port 55358 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:03.711000 audit[5005]: USER_ACCT pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.715714 sshd[5005]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:03.713000 audit[5005]: CRED_ACQ pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.726339 kernel: audit: type=1101 audit(1752107463.711:1547): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.726441 kernel: audit: type=1103 audit(1752107463.713:1548): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.726481 kernel: audit: type=1006 audit(1752107463.713:1549): pid=5005 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 10 00:31:03.728449 systemd-logind[1210]: New session 14 of user core. Jul 10 00:31:03.730286 systemd[1]: Started session-14.scope. Jul 10 00:31:03.713000 audit[5005]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed20e090 a2=3 a3=1 items=0 ppid=1 pid=5005 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:03.738965 kernel: audit: type=1300 audit(1752107463.713:1549): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed20e090 a2=3 a3=1 items=0 ppid=1 pid=5005 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:03.739075 kernel: audit: type=1327 audit(1752107463.713:1549): proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:03.713000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:03.746000 audit[5005]: USER_START pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.755847 kernel: audit: type=1105 audit(1752107463.746:1550): pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.756042 kernel: audit: type=1103 audit(1752107463.754:1551): pid=5007 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.754000 audit[5007]: CRED_ACQ pid=5007 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.914098 sshd[5005]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:03.914000 audit[5005]: USER_END pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.917939 systemd[1]: sshd@13-10.0.0.46:22-10.0.0.1:55358.service: Deactivated successfully. Jul 10 00:31:03.914000 audit[5005]: CRED_DISP pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.918888 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 00:31:03.919708 systemd-logind[1210]: Session 14 logged out. Waiting for processes to exit. Jul 10 00:31:03.920483 systemd-logind[1210]: Removed session 14. Jul 10 00:31:03.922177 kernel: audit: type=1106 audit(1752107463.914:1552): pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.922259 kernel: audit: type=1104 audit(1752107463.914:1553): pid=5005 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:03.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.46:22-10.0.0.1:55358 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:04.837943 env[1221]: time="2025-07-10T00:31:04.837892746Z" level=info msg="StopPodSandbox for \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\"" Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.904 [WARNING][5029] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tx2lp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"dc1f8e65-fe86-487d-86ca-ba8db7978167", ResourceVersion:"1170", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6", Pod:"csi-node-driver-tx2lp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali051616c4cf3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.905 [INFO][5029] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.905 [INFO][5029] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" iface="eth0" netns="" Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.905 [INFO][5029] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.905 [INFO][5029] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.930 [INFO][5038] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" HandleID="k8s-pod-network.86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.931 [INFO][5038] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.931 [INFO][5038] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.943 [WARNING][5038] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" HandleID="k8s-pod-network.86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.943 [INFO][5038] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" HandleID="k8s-pod-network.86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.945 [INFO][5038] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:04.950105 env[1221]: 2025-07-10 00:31:04.947 [INFO][5029] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:31:04.950547 env[1221]: time="2025-07-10T00:31:04.950136088Z" level=info msg="TearDown network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\" successfully" Jul 10 00:31:04.950547 env[1221]: time="2025-07-10T00:31:04.950168368Z" level=info msg="StopPodSandbox for \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\" returns successfully" Jul 10 00:31:04.950810 env[1221]: time="2025-07-10T00:31:04.950759176Z" level=info msg="RemovePodSandbox for \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\"" Jul 10 00:31:04.950857 env[1221]: time="2025-07-10T00:31:04.950801456Z" level=info msg="Forcibly stopping sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\"" Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:04.991 [WARNING][5056] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--tx2lp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"dc1f8e65-fe86-487d-86ca-ba8db7978167", ResourceVersion:"1170", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1654bfa18c960ffb37ef51091afbe447262151976a93a600a25197ee59511be6", Pod:"csi-node-driver-tx2lp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali051616c4cf3", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:04.992 [INFO][5056] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:04.992 [INFO][5056] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" iface="eth0" netns="" Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:04.992 [INFO][5056] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:04.992 [INFO][5056] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:05.030 [INFO][5065] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" HandleID="k8s-pod-network.86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:05.030 [INFO][5065] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:05.030 [INFO][5065] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:05.039 [WARNING][5065] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" HandleID="k8s-pod-network.86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:05.039 [INFO][5065] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" HandleID="k8s-pod-network.86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Workload="localhost-k8s-csi--node--driver--tx2lp-eth0" Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:05.042 [INFO][5065] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.045271 env[1221]: 2025-07-10 00:31:05.043 [INFO][5056] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e" Jul 10 00:31:05.045733 env[1221]: time="2025-07-10T00:31:05.045324061Z" level=info msg="TearDown network for sandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\" successfully" Jul 10 00:31:05.049744 env[1221]: time="2025-07-10T00:31:05.049695432Z" level=info msg="RemovePodSandbox \"86f9fd73341d45e33e3a814e7a0e107ed97fa6368614f3c6101b7e493585d49e\" returns successfully" Jul 10 00:31:05.050277 env[1221]: time="2025-07-10T00:31:05.050247759Z" level=info msg="StopPodSandbox for \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\"" Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.089 [WARNING][5086] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095", ResourceVersion:"1078", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06", Pod:"coredns-7c65d6cfc9-ww9zc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidf127ad4673", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.089 [INFO][5086] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.089 [INFO][5086] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" iface="eth0" netns="" Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.089 [INFO][5086] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.089 [INFO][5086] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.108 [INFO][5095] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" HandleID="k8s-pod-network.bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.108 [INFO][5095] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.108 [INFO][5095] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.119 [WARNING][5095] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" HandleID="k8s-pod-network.bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.119 [INFO][5095] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" HandleID="k8s-pod-network.bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.121 [INFO][5095] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.125438 env[1221]: 2025-07-10 00:31:05.123 [INFO][5086] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:31:05.125438 env[1221]: time="2025-07-10T00:31:05.125356407Z" level=info msg="TearDown network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\" successfully" Jul 10 00:31:05.125438 env[1221]: time="2025-07-10T00:31:05.125388407Z" level=info msg="StopPodSandbox for \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\" returns successfully" Jul 10 00:31:05.126807 env[1221]: time="2025-07-10T00:31:05.126763464Z" level=info msg="RemovePodSandbox for \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\"" Jul 10 00:31:05.127143 env[1221]: time="2025-07-10T00:31:05.126807024Z" level=info msg="Forcibly stopping sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\"" Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.163 [WARNING][5113] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"6b79d55d-2c8d-4e37-bf85-cf4cb2ccf095", ResourceVersion:"1078", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"85746bd3e01bbed1ef0a1a0a5af3b15ddb2366b76317a0d7df03304e4b9f1e06", Pod:"coredns-7c65d6cfc9-ww9zc", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calidf127ad4673", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.163 [INFO][5113] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.163 [INFO][5113] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" iface="eth0" netns="" Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.163 [INFO][5113] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.163 [INFO][5113] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.188 [INFO][5122] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" HandleID="k8s-pod-network.bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.189 [INFO][5122] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.189 [INFO][5122] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.198 [WARNING][5122] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" HandleID="k8s-pod-network.bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.198 [INFO][5122] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" HandleID="k8s-pod-network.bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Workload="localhost-k8s-coredns--7c65d6cfc9--ww9zc-eth0" Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.200 [INFO][5122] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.203861 env[1221]: 2025-07-10 00:31:05.202 [INFO][5113] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6" Jul 10 00:31:05.204334 env[1221]: time="2025-07-10T00:31:05.203895176Z" level=info msg="TearDown network for sandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\" successfully" Jul 10 00:31:05.206925 env[1221]: time="2025-07-10T00:31:05.206864891Z" level=info msg="RemovePodSandbox \"bba96b4db289446b3df3244fb4f800634864b5bd37e96078035b7922bd5d47b6\" returns successfully" Jul 10 00:31:05.207447 env[1221]: time="2025-07-10T00:31:05.207417578Z" level=info msg="StopPodSandbox for \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\"" Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.243 [WARNING][5139] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"d96ad5bd-2619-4aae-87cf-4a850e4349ff", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0", Pod:"coredns-7c65d6cfc9-c8lgs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicbea1a66572", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.244 [INFO][5139] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.244 [INFO][5139] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" iface="eth0" netns="" Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.244 [INFO][5139] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.244 [INFO][5139] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.263 [INFO][5147] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" HandleID="k8s-pod-network.50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.263 [INFO][5147] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.263 [INFO][5147] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.273 [WARNING][5147] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" HandleID="k8s-pod-network.50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.273 [INFO][5147] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" HandleID="k8s-pod-network.50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.275 [INFO][5147] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.278558 env[1221]: 2025-07-10 00:31:05.276 [INFO][5139] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:31:05.279000 env[1221]: time="2025-07-10T00:31:05.278590979Z" level=info msg="TearDown network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\" successfully" Jul 10 00:31:05.279000 env[1221]: time="2025-07-10T00:31:05.278623260Z" level=info msg="StopPodSandbox for \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\" returns successfully" Jul 10 00:31:05.279645 env[1221]: time="2025-07-10T00:31:05.279614871Z" level=info msg="RemovePodSandbox for \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\"" Jul 10 00:31:05.279784 env[1221]: time="2025-07-10T00:31:05.279745153Z" level=info msg="Forcibly stopping sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\"" Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.317 [WARNING][5165] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"d96ad5bd-2619-4aae-87cf-4a850e4349ff", ResourceVersion:"1024", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f2a841b4112ccd5e80f33846d026d26b06ba84249b6227ff93d3062b7a1bc5d0", Pod:"coredns-7c65d6cfc9-c8lgs", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calicbea1a66572", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.317 [INFO][5165] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.317 [INFO][5165] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" iface="eth0" netns="" Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.317 [INFO][5165] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.317 [INFO][5165] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.337 [INFO][5174] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" HandleID="k8s-pod-network.50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.337 [INFO][5174] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.337 [INFO][5174] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.345 [WARNING][5174] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" HandleID="k8s-pod-network.50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.345 [INFO][5174] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" HandleID="k8s-pod-network.50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Workload="localhost-k8s-coredns--7c65d6cfc9--c8lgs-eth0" Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.347 [INFO][5174] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.353030 env[1221]: 2025-07-10 00:31:05.349 [INFO][5165] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8" Jul 10 00:31:05.353594 env[1221]: time="2025-07-10T00:31:05.353556746Z" level=info msg="TearDown network for sandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\" successfully" Jul 10 00:31:05.366444 env[1221]: time="2025-07-10T00:31:05.366377537Z" level=info msg="RemovePodSandbox \"50b48376acafa13572bdecd016dd9e79316459e4fe4199816a9d9215347467a8\" returns successfully" Jul 10 00:31:05.367100 env[1221]: time="2025-07-10T00:31:05.367071106Z" level=info msg="StopPodSandbox for \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\"" Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.402 [WARNING][5191] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"32d2ba57-5ec9-4de3-ac76-468515e5b7b3", ResourceVersion:"1145", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c", Pod:"goldmane-58fd7646b9-b9rrv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidcdac3503cf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.403 [INFO][5191] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.403 [INFO][5191] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" iface="eth0" netns="" Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.403 [INFO][5191] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.403 [INFO][5191] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.421 [INFO][5199] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" HandleID="k8s-pod-network.66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.421 [INFO][5199] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.421 [INFO][5199] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.431 [WARNING][5199] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" HandleID="k8s-pod-network.66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.431 [INFO][5199] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" HandleID="k8s-pod-network.66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.432 [INFO][5199] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.436161 env[1221]: 2025-07-10 00:31:05.434 [INFO][5191] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:31:05.436161 env[1221]: time="2025-07-10T00:31:05.436133722Z" level=info msg="TearDown network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\" successfully" Jul 10 00:31:05.438021 env[1221]: time="2025-07-10T00:31:05.436166843Z" level=info msg="StopPodSandbox for \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\" returns successfully" Jul 10 00:31:05.438021 env[1221]: time="2025-07-10T00:31:05.437564379Z" level=info msg="RemovePodSandbox for \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\"" Jul 10 00:31:05.438021 env[1221]: time="2025-07-10T00:31:05.437602260Z" level=info msg="Forcibly stopping sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\"" Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.473 [WARNING][5217] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"32d2ba57-5ec9-4de3-ac76-468515e5b7b3", ResourceVersion:"1145", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7ac87095d1b9e8adbf70a48af975f8fb0fa8f211adc890ac55e443ae5a3b263c", Pod:"goldmane-58fd7646b9-b9rrv", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calidcdac3503cf", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.473 [INFO][5217] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.473 [INFO][5217] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" iface="eth0" netns="" Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.473 [INFO][5217] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.473 [INFO][5217] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.496 [INFO][5225] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" HandleID="k8s-pod-network.66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.496 [INFO][5225] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.496 [INFO][5225] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.505 [WARNING][5225] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" HandleID="k8s-pod-network.66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.505 [INFO][5225] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" HandleID="k8s-pod-network.66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Workload="localhost-k8s-goldmane--58fd7646b9--b9rrv-eth0" Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.507 [INFO][5225] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.511022 env[1221]: 2025-07-10 00:31:05.509 [INFO][5217] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37" Jul 10 00:31:05.511548 env[1221]: time="2025-07-10T00:31:05.511063689Z" level=info msg="TearDown network for sandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\" successfully" Jul 10 00:31:05.513892 env[1221]: time="2025-07-10T00:31:05.513851641Z" level=info msg="RemovePodSandbox \"66952b5258f70801d5a47a269fd0f29682598a911a3a190a62990b6e68f50e37\" returns successfully" Jul 10 00:31:05.514412 env[1221]: time="2025-07-10T00:31:05.514385768Z" level=info msg="StopPodSandbox for \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\"" Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.548 [WARNING][5242] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" WorkloadEndpoint="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.548 [INFO][5242] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.548 [INFO][5242] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" iface="eth0" netns="" Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.548 [INFO][5242] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.548 [INFO][5242] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.567 [INFO][5251] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" HandleID="k8s-pod-network.e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Workload="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.567 [INFO][5251] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.567 [INFO][5251] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.576 [WARNING][5251] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" HandleID="k8s-pod-network.e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Workload="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.576 [INFO][5251] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" HandleID="k8s-pod-network.e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Workload="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.579 [INFO][5251] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.582412 env[1221]: 2025-07-10 00:31:05.580 [INFO][5242] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:31:05.582825 env[1221]: time="2025-07-10T00:31:05.582445573Z" level=info msg="TearDown network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\" successfully" Jul 10 00:31:05.582825 env[1221]: time="2025-07-10T00:31:05.582481373Z" level=info msg="StopPodSandbox for \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\" returns successfully" Jul 10 00:31:05.582996 env[1221]: time="2025-07-10T00:31:05.582961619Z" level=info msg="RemovePodSandbox for \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\"" Jul 10 00:31:05.583043 env[1221]: time="2025-07-10T00:31:05.583004659Z" level=info msg="Forcibly stopping sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\"" Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.619 [WARNING][5270] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" WorkloadEndpoint="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.619 [INFO][5270] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.619 [INFO][5270] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" iface="eth0" netns="" Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.619 [INFO][5270] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.620 [INFO][5270] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.639 [INFO][5280] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" HandleID="k8s-pod-network.e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Workload="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.639 [INFO][5280] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.639 [INFO][5280] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.648 [WARNING][5280] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" HandleID="k8s-pod-network.e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Workload="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.648 [INFO][5280] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" HandleID="k8s-pod-network.e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Workload="localhost-k8s-whisker--66547dc974--gk5j4-eth0" Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.650 [INFO][5280] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.654431 env[1221]: 2025-07-10 00:31:05.652 [INFO][5270] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9" Jul 10 00:31:05.654839 env[1221]: time="2025-07-10T00:31:05.654468184Z" level=info msg="TearDown network for sandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\" successfully" Jul 10 00:31:05.657480 env[1221]: time="2025-07-10T00:31:05.657402539Z" level=info msg="RemovePodSandbox \"e6ca03fd6d4f33b417e97592048b4d7f8840e7ef003b7fe16c6f1639d1a6dfe9\" returns successfully" Jul 10 00:31:05.658070 env[1221]: time="2025-07-10T00:31:05.658041547Z" level=info msg="StopPodSandbox for \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\"" Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.694 [WARNING][5298] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0", GenerateName:"calico-apiserver-78b48786cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"3945e138-23ea-4e40-b276-0e4f1b6cde2f", ResourceVersion:"1110", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b48786cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8", Pod:"calico-apiserver-78b48786cd-sstd6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic26c760bb11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.694 [INFO][5298] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.694 [INFO][5298] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" iface="eth0" netns="" Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.694 [INFO][5298] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.694 [INFO][5298] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.713 [INFO][5307] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" HandleID="k8s-pod-network.ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.713 [INFO][5307] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.713 [INFO][5307] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.724 [WARNING][5307] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" HandleID="k8s-pod-network.ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.724 [INFO][5307] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" HandleID="k8s-pod-network.ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.726 [INFO][5307] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.730106 env[1221]: 2025-07-10 00:31:05.728 [INFO][5298] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:31:05.731758 env[1221]: time="2025-07-10T00:31:05.731389294Z" level=info msg="TearDown network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\" successfully" Jul 10 00:31:05.731758 env[1221]: time="2025-07-10T00:31:05.731429415Z" level=info msg="StopPodSandbox for \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\" returns successfully" Jul 10 00:31:05.732254 env[1221]: time="2025-07-10T00:31:05.732221024Z" level=info msg="RemovePodSandbox for \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\"" Jul 10 00:31:05.732400 env[1221]: time="2025-07-10T00:31:05.732257744Z" level=info msg="Forcibly stopping sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\"" Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.764 [WARNING][5325] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0", GenerateName:"calico-apiserver-78b48786cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"3945e138-23ea-4e40-b276-0e4f1b6cde2f", ResourceVersion:"1110", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b48786cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"696ebf070cdb10471819c5d2d47c1d2d77c1121958dfe8b73d505db81cb5e4d8", Pod:"calico-apiserver-78b48786cd-sstd6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic26c760bb11", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.765 [INFO][5325] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.765 [INFO][5325] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" iface="eth0" netns="" Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.765 [INFO][5325] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.765 [INFO][5325] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.785 [INFO][5334] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" HandleID="k8s-pod-network.ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.785 [INFO][5334] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.785 [INFO][5334] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.793 [WARNING][5334] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" HandleID="k8s-pod-network.ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.794 [INFO][5334] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" HandleID="k8s-pod-network.ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Workload="localhost-k8s-calico--apiserver--78b48786cd--sstd6-eth0" Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.795 [INFO][5334] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.799305 env[1221]: 2025-07-10 00:31:05.797 [INFO][5325] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02" Jul 10 00:31:05.799719 env[1221]: time="2025-07-10T00:31:05.799353738Z" level=info msg="TearDown network for sandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\" successfully" Jul 10 00:31:05.802297 env[1221]: time="2025-07-10T00:31:05.802251772Z" level=info msg="RemovePodSandbox \"ad05b5fa59678175ed133c84ab7f61eee654f50ddcdead8f7ffe0778dec53e02\" returns successfully" Jul 10 00:31:05.802786 env[1221]: time="2025-07-10T00:31:05.802763658Z" level=info msg="StopPodSandbox for \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\"" Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.836 [WARNING][5353] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0", GenerateName:"calico-kube-controllers-8b7698b4b-", Namespace:"calico-system", SelfLink:"", UID:"cbc7ce9d-25c0-407a-b05e-17b25c39498b", ResourceVersion:"1161", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8b7698b4b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504", Pod:"calico-kube-controllers-8b7698b4b-r27nc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali939a2262830", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.836 [INFO][5353] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.836 [INFO][5353] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" iface="eth0" netns="" Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.836 [INFO][5353] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.836 [INFO][5353] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.856 [INFO][5362] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" HandleID="k8s-pod-network.edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.856 [INFO][5362] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.856 [INFO][5362] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.866 [WARNING][5362] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" HandleID="k8s-pod-network.edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.867 [INFO][5362] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" HandleID="k8s-pod-network.edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.872 [INFO][5362] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.875922 env[1221]: 2025-07-10 00:31:05.874 [INFO][5353] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:31:05.876568 env[1221]: time="2025-07-10T00:31:05.875954924Z" level=info msg="TearDown network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\" successfully" Jul 10 00:31:05.876568 env[1221]: time="2025-07-10T00:31:05.875987724Z" level=info msg="StopPodSandbox for \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\" returns successfully" Jul 10 00:31:05.876729 env[1221]: time="2025-07-10T00:31:05.876702773Z" level=info msg="RemovePodSandbox for \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\"" Jul 10 00:31:05.876776 env[1221]: time="2025-07-10T00:31:05.876741093Z" level=info msg="Forcibly stopping sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\"" Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.912 [WARNING][5380] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0", GenerateName:"calico-kube-controllers-8b7698b4b-", Namespace:"calico-system", SelfLink:"", UID:"cbc7ce9d-25c0-407a-b05e-17b25c39498b", ResourceVersion:"1161", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"8b7698b4b", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8e1328da6b2b0b782846e15e318d28550e53f6567441879ac020024bf485b504", Pod:"calico-kube-controllers-8b7698b4b-r27nc", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali939a2262830", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.912 [INFO][5380] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.912 [INFO][5380] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" iface="eth0" netns="" Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.912 [INFO][5380] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.912 [INFO][5380] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.931 [INFO][5389] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" HandleID="k8s-pod-network.edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.931 [INFO][5389] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.931 [INFO][5389] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.940 [WARNING][5389] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" HandleID="k8s-pod-network.edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.940 [INFO][5389] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" HandleID="k8s-pod-network.edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Workload="localhost-k8s-calico--kube--controllers--8b7698b4b--r27nc-eth0" Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.943 [INFO][5389] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:05.946996 env[1221]: 2025-07-10 00:31:05.944 [INFO][5380] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898" Jul 10 00:31:05.947610 env[1221]: time="2025-07-10T00:31:05.947025044Z" level=info msg="TearDown network for sandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\" successfully" Jul 10 00:31:05.950276 env[1221]: time="2025-07-10T00:31:05.950236682Z" level=info msg="RemovePodSandbox \"edd7ad90ee10ff00483bfebc025525c28cb1b172fb9fc9fbe8d92fd46dff8898\" returns successfully" Jul 10 00:31:05.950828 env[1221]: time="2025-07-10T00:31:05.950791649Z" level=info msg="StopPodSandbox for \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\"" Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:05.986 [WARNING][5408] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0", GenerateName:"calico-apiserver-78b48786cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e8aa6f5-da0d-40d1-a391-88634bd5f211", ResourceVersion:"1184", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b48786cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598", Pod:"calico-apiserver-78b48786cd-czw7r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2924b446e30", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:05.986 [INFO][5408] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:05.986 [INFO][5408] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" iface="eth0" netns="" Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:05.986 [INFO][5408] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:05.986 [INFO][5408] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:06.005 [INFO][5417] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" HandleID="k8s-pod-network.b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:06.005 [INFO][5417] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:06.005 [INFO][5417] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:06.013 [WARNING][5417] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" HandleID="k8s-pod-network.b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:06.013 [INFO][5417] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" HandleID="k8s-pod-network.b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:06.015 [INFO][5417] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:06.019110 env[1221]: 2025-07-10 00:31:06.017 [INFO][5408] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:31:06.020943 env[1221]: time="2025-07-10T00:31:06.020889835Z" level=info msg="TearDown network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\" successfully" Jul 10 00:31:06.021018 env[1221]: time="2025-07-10T00:31:06.021001877Z" level=info msg="StopPodSandbox for \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\" returns successfully" Jul 10 00:31:06.021579 env[1221]: time="2025-07-10T00:31:06.021544563Z" level=info msg="RemovePodSandbox for \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\"" Jul 10 00:31:06.021650 env[1221]: time="2025-07-10T00:31:06.021588164Z" level=info msg="Forcibly stopping sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\"" Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.055 [WARNING][5434] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0", GenerateName:"calico-apiserver-78b48786cd-", Namespace:"calico-apiserver", SelfLink:"", UID:"5e8aa6f5-da0d-40d1-a391-88634bd5f211", ResourceVersion:"1184", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 30, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"78b48786cd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7ef84fb7bf8449cd4eb24dd172593fb6f15b007b51c35e41b2d000d6ef23d598", Pod:"calico-apiserver-78b48786cd-czw7r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali2924b446e30", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.056 [INFO][5434] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.056 [INFO][5434] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" iface="eth0" netns="" Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.056 [INFO][5434] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.056 [INFO][5434] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.080 [INFO][5442] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" HandleID="k8s-pod-network.b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.080 [INFO][5442] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.080 [INFO][5442] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.091 [WARNING][5442] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" HandleID="k8s-pod-network.b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.091 [INFO][5442] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" HandleID="k8s-pod-network.b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Workload="localhost-k8s-calico--apiserver--78b48786cd--czw7r-eth0" Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.093 [INFO][5442] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:31:06.097340 env[1221]: 2025-07-10 00:31:06.095 [INFO][5434] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f" Jul 10 00:31:06.097792 env[1221]: time="2025-07-10T00:31:06.097288329Z" level=info msg="TearDown network for sandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\" successfully" Jul 10 00:31:06.100897 env[1221]: time="2025-07-10T00:31:06.100843051Z" level=info msg="RemovePodSandbox \"b1bded4b49665e5008249ccd9819d6df51c9029e8ae9a7e83b80581e7c297d0f\" returns successfully" Jul 10 00:31:08.292000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:08.292000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4001efbac0 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:31:08.292000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:31:08.293000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:08.293000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4001efbae0 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:31:08.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:31:08.293000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:08.293000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4001efbb00 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:31:08.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:31:08.293000 audit[1828]: AVC avc: denied { watch } for pid=1828 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:31:08.293000 audit[1828]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4002cdbf60 a2=fc6 a3=0 items=0 ppid=1662 pid=1828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c411,c902 key=(null) Jul 10 00:31:08.293000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:31:08.919324 systemd[1]: Started sshd@14-10.0.0.46:22-10.0.0.1:55360.service. Jul 10 00:31:08.919000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.46:22-10.0.0.1:55360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:08.924060 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 10 00:31:08.924214 kernel: audit: type=1130 audit(1752107468.919:1559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.46:22-10.0.0.1:55360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:08.969000 audit[5472]: USER_ACCT pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:08.970462 sshd[5472]: Accepted publickey for core from 10.0.0.1 port 55360 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:08.971923 sshd[5472]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:08.971000 audit[5472]: CRED_ACQ pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:08.976551 kernel: audit: type=1101 audit(1752107468.969:1560): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:08.976646 kernel: audit: type=1103 audit(1752107468.971:1561): pid=5472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:08.978885 kernel: audit: type=1006 audit(1752107468.971:1562): pid=5472 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 10 00:31:08.971000 audit[5472]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8b7ada0 a2=3 a3=1 items=0 ppid=1 pid=5472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:08.980989 systemd-logind[1210]: New session 15 of user core. Jul 10 00:31:08.982077 systemd[1]: Started session-15.scope. Jul 10 00:31:08.982557 kernel: audit: type=1300 audit(1752107468.971:1562): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd8b7ada0 a2=3 a3=1 items=0 ppid=1 pid=5472 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:08.971000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:08.983729 kernel: audit: type=1327 audit(1752107468.971:1562): proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:08.985000 audit[5472]: USER_START pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:08.989000 audit[5474]: CRED_ACQ pid=5474 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:08.993039 kernel: audit: type=1105 audit(1752107468.985:1563): pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:08.993135 kernel: audit: type=1103 audit(1752107468.989:1564): pid=5474 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:09.037802 systemd[1]: run-containerd-runc-k8s.io-a307ea495538fe2fa047f9d82d02e43c35145920f143e9ec15e5c1658109d9fd-runc.CCG5p7.mount: Deactivated successfully. Jul 10 00:31:09.136000 audit[5508]: NETFILTER_CFG table=filter:132 family=2 entries=9 op=nft_register_rule pid=5508 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:09.136000 audit[5508]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffdc99550 a2=0 a3=1 items=0 ppid=2095 pid=5508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:09.142813 kernel: audit: type=1325 audit(1752107469.136:1565): table=filter:132 family=2 entries=9 op=nft_register_rule pid=5508 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:09.142906 kernel: audit: type=1300 audit(1752107469.136:1565): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=fffffdc99550 a2=0 a3=1 items=0 ppid=2095 pid=5508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:09.136000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:09.143000 audit[5508]: NETFILTER_CFG table=nat:133 family=2 entries=31 op=nft_register_chain pid=5508 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:09.143000 audit[5508]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10884 a0=3 a1=fffffdc99550 a2=0 a3=1 items=0 ppid=2095 pid=5508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:09.143000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:09.186398 sshd[5472]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:09.187000 audit[5472]: USER_END pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:09.187000 audit[5472]: CRED_DISP pid=5472 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:09.189576 systemd[1]: sshd@14-10.0.0.46:22-10.0.0.1:55360.service: Deactivated successfully. Jul 10 00:31:09.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.46:22-10.0.0.1:55360 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:09.190530 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 00:31:09.191075 systemd-logind[1210]: Session 15 logged out. Waiting for processes to exit. Jul 10 00:31:09.191839 systemd-logind[1210]: Removed session 15. Jul 10 00:31:14.191931 systemd[1]: Started sshd@15-10.0.0.46:22-10.0.0.1:35130.service. Jul 10 00:31:14.191000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.46:22-10.0.0.1:35130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:14.193342 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 00:31:14.193393 kernel: audit: type=1130 audit(1752107474.191:1570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.46:22-10.0.0.1:35130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:14.244000 audit[5539]: USER_ACCT pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.244716 sshd[5539]: Accepted publickey for core from 10.0.0.1 port 35130 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:14.246091 sshd[5539]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:14.245000 audit[5539]: CRED_ACQ pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.250827 kernel: audit: type=1101 audit(1752107474.244:1571): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.250901 kernel: audit: type=1103 audit(1752107474.245:1572): pid=5539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.252850 kernel: audit: type=1006 audit(1752107474.245:1573): pid=5539 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 10 00:31:14.245000 audit[5539]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5d63010 a2=3 a3=1 items=0 ppid=1 pid=5539 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:14.255483 systemd[1]: Started session-16.scope. Jul 10 00:31:14.255797 systemd-logind[1210]: New session 16 of user core. Jul 10 00:31:14.256467 kernel: audit: type=1300 audit(1752107474.245:1573): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5d63010 a2=3 a3=1 items=0 ppid=1 pid=5539 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:14.256495 kernel: audit: type=1327 audit(1752107474.245:1573): proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:14.245000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:14.260000 audit[5539]: USER_START pid=5539 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.264348 kernel: audit: type=1105 audit(1752107474.260:1574): pid=5539 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.264000 audit[5541]: CRED_ACQ pid=5541 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.268342 kernel: audit: type=1103 audit(1752107474.264:1575): pid=5541 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.401590 sshd[5539]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:14.402000 audit[5539]: USER_END pid=5539 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.404632 systemd[1]: sshd@15-10.0.0.46:22-10.0.0.1:35130.service: Deactivated successfully. Jul 10 00:31:14.405295 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 00:31:14.402000 audit[5539]: CRED_DISP pid=5539 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.407402 systemd[1]: Started sshd@16-10.0.0.46:22-10.0.0.1:35140.service. Jul 10 00:31:14.408189 systemd-logind[1210]: Session 16 logged out. Waiting for processes to exit. Jul 10 00:31:14.408910 systemd-logind[1210]: Removed session 16. Jul 10 00:31:14.409376 kernel: audit: type=1106 audit(1752107474.402:1576): pid=5539 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.409443 kernel: audit: type=1104 audit(1752107474.402:1577): pid=5539 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.46:22-10.0.0.1:35130 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:14.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.46:22-10.0.0.1:35140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:14.450000 audit[5552]: USER_ACCT pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.451391 sshd[5552]: Accepted publickey for core from 10.0.0.1 port 35140 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:14.452877 sshd[5552]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:14.452000 audit[5552]: CRED_ACQ pid=5552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.452000 audit[5552]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd6564e30 a2=3 a3=1 items=0 ppid=1 pid=5552 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:14.452000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:14.456809 systemd-logind[1210]: New session 17 of user core. Jul 10 00:31:14.458384 systemd[1]: Started session-17.scope. Jul 10 00:31:14.461000 audit[5552]: USER_START pid=5552 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.463000 audit[5554]: CRED_ACQ pid=5554 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.681477 sshd[5552]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:14.682000 audit[5552]: USER_END pid=5552 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.682000 audit[5552]: CRED_DISP pid=5552 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.686206 systemd[1]: Started sshd@17-10.0.0.46:22-10.0.0.1:35152.service. Jul 10 00:31:14.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.46:22-10.0.0.1:35152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:14.686910 systemd[1]: sshd@16-10.0.0.46:22-10.0.0.1:35140.service: Deactivated successfully. Jul 10 00:31:14.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.46:22-10.0.0.1:35140 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:14.687876 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 00:31:14.688571 systemd-logind[1210]: Session 17 logged out. Waiting for processes to exit. Jul 10 00:31:14.689272 systemd-logind[1210]: Removed session 17. Jul 10 00:31:14.734000 audit[5562]: USER_ACCT pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.734761 sshd[5562]: Accepted publickey for core from 10.0.0.1 port 35152 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:14.735000 audit[5562]: CRED_ACQ pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.735000 audit[5562]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff10ab670 a2=3 a3=1 items=0 ppid=1 pid=5562 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:14.735000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:14.736473 sshd[5562]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:14.740350 systemd-logind[1210]: New session 18 of user core. Jul 10 00:31:14.741234 systemd[1]: Started session-18.scope. Jul 10 00:31:14.744000 audit[5562]: USER_START pid=5562 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:14.746000 audit[5565]: CRED_ACQ pid=5565 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:16.542000 audit[5583]: NETFILTER_CFG table=filter:134 family=2 entries=20 op=nft_register_rule pid=5583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:16.542000 audit[5583]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffeacf43a0 a2=0 a3=1 items=0 ppid=2095 pid=5583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:16.542000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:16.549000 audit[5583]: NETFILTER_CFG table=nat:135 family=2 entries=26 op=nft_register_rule pid=5583 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:16.549000 audit[5583]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffeacf43a0 a2=0 a3=1 items=0 ppid=2095 pid=5583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:16.549000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:16.555436 sshd[5562]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:16.560000 audit[5562]: USER_END pid=5562 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:16.560000 audit[5562]: CRED_DISP pid=5562 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:16.560000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.46:22-10.0.0.1:35154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:16.561732 systemd[1]: Started sshd@18-10.0.0.46:22-10.0.0.1:35154.service. Jul 10 00:31:16.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.46:22-10.0.0.1:35152 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:16.563512 systemd[1]: sshd@17-10.0.0.46:22-10.0.0.1:35152.service: Deactivated successfully. Jul 10 00:31:16.565186 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 00:31:16.566362 systemd-logind[1210]: Session 18 logged out. Waiting for processes to exit. Jul 10 00:31:16.567308 systemd-logind[1210]: Removed session 18. Jul 10 00:31:16.572000 audit[5588]: NETFILTER_CFG table=filter:136 family=2 entries=32 op=nft_register_rule pid=5588 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:16.572000 audit[5588]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=11944 a0=3 a1=ffffd133e1e0 a2=0 a3=1 items=0 ppid=2095 pid=5588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:16.572000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:16.576000 audit[5588]: NETFILTER_CFG table=nat:137 family=2 entries=26 op=nft_register_rule pid=5588 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:16.576000 audit[5588]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8076 a0=3 a1=ffffd133e1e0 a2=0 a3=1 items=0 ppid=2095 pid=5588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:16.576000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:16.606000 audit[5586]: USER_ACCT pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:16.606883 sshd[5586]: Accepted publickey for core from 10.0.0.1 port 35154 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:16.607000 audit[5586]: CRED_ACQ pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:16.607000 audit[5586]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff9ce9fb0 a2=3 a3=1 items=0 ppid=1 pid=5586 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:16.607000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:16.608334 sshd[5586]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:16.613077 systemd[1]: Started session-19.scope. Jul 10 00:31:16.614304 systemd-logind[1210]: New session 19 of user core. Jul 10 00:31:16.618000 audit[5586]: USER_START pid=5586 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:16.620000 audit[5590]: CRED_ACQ pid=5590 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:17.082265 sshd[5586]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:17.083000 audit[5586]: USER_END pid=5586 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:17.083000 audit[5586]: CRED_DISP pid=5586 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:17.085390 systemd[1]: sshd@18-10.0.0.46:22-10.0.0.1:35154.service: Deactivated successfully. Jul 10 00:31:17.085000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.46:22-10.0.0.1:35154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:17.086046 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 00:31:17.088373 systemd[1]: Started sshd@19-10.0.0.46:22-10.0.0.1:35156.service. Jul 10 00:31:17.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.46:22-10.0.0.1:35156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:17.089023 systemd-logind[1210]: Session 19 logged out. Waiting for processes to exit. Jul 10 00:31:17.090761 systemd-logind[1210]: Removed session 19. Jul 10 00:31:17.134000 audit[5600]: USER_ACCT pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:17.134665 sshd[5600]: Accepted publickey for core from 10.0.0.1 port 35156 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:17.135000 audit[5600]: CRED_ACQ pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:17.135000 audit[5600]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffeb2f56e0 a2=3 a3=1 items=0 ppid=1 pid=5600 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:17.135000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:17.136023 sshd[5600]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:17.140254 systemd[1]: Started session-20.scope. Jul 10 00:31:17.140387 systemd-logind[1210]: New session 20 of user core. Jul 10 00:31:17.143000 audit[5600]: USER_START pid=5600 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:17.145000 audit[5602]: CRED_ACQ pid=5602 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:17.260404 sshd[5600]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:17.261000 audit[5600]: USER_END pid=5600 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:17.261000 audit[5600]: CRED_DISP pid=5600 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:17.262928 systemd[1]: sshd@19-10.0.0.46:22-10.0.0.1:35156.service: Deactivated successfully. Jul 10 00:31:17.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.46:22-10.0.0.1:35156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:17.263699 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 00:31:17.264191 systemd-logind[1210]: Session 20 logged out. Waiting for processes to exit. Jul 10 00:31:17.264821 systemd-logind[1210]: Removed session 20. Jul 10 00:31:21.641000 audit[5620]: NETFILTER_CFG table=filter:138 family=2 entries=20 op=nft_register_rule pid=5620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:21.642627 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 10 00:31:21.642708 kernel: audit: type=1325 audit(1752107481.641:1619): table=filter:138 family=2 entries=20 op=nft_register_rule pid=5620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:21.641000 audit[5620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc428d800 a2=0 a3=1 items=0 ppid=2095 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:21.648194 kernel: audit: type=1300 audit(1752107481.641:1619): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc428d800 a2=0 a3=1 items=0 ppid=2095 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:21.648260 kernel: audit: type=1327 audit(1752107481.641:1619): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:21.641000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:21.652000 audit[5620]: NETFILTER_CFG table=nat:139 family=2 entries=110 op=nft_register_chain pid=5620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:21.652000 audit[5620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffc428d800 a2=0 a3=1 items=0 ppid=2095 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:21.659497 kernel: audit: type=1325 audit(1752107481.652:1620): table=nat:139 family=2 entries=110 op=nft_register_chain pid=5620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:31:21.659550 kernel: audit: type=1300 audit(1752107481.652:1620): arch=c00000b7 syscall=211 success=yes exit=50988 a0=3 a1=ffffc428d800 a2=0 a3=1 items=0 ppid=2095 pid=5620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:21.659577 kernel: audit: type=1327 audit(1752107481.652:1620): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:21.652000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:31:21.830740 kubelet[1946]: E0710 00:31:21.830509 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:31:22.264721 systemd[1]: Started sshd@20-10.0.0.46:22-10.0.0.1:35166.service. Jul 10 00:31:22.264000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.46:22-10.0.0.1:35166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:22.268333 kernel: audit: type=1130 audit(1752107482.264:1621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.46:22-10.0.0.1:35166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:22.306000 audit[5623]: USER_ACCT pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:22.307299 sshd[5623]: Accepted publickey for core from 10.0.0.1 port 35166 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:22.308515 sshd[5623]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:22.307000 audit[5623]: CRED_ACQ pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:22.313716 kernel: audit: type=1101 audit(1752107482.306:1622): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:22.313784 kernel: audit: type=1103 audit(1752107482.307:1623): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:22.316032 kernel: audit: type=1006 audit(1752107482.307:1624): pid=5623 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 10 00:31:22.307000 audit[5623]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff8c33a80 a2=3 a3=1 items=0 ppid=1 pid=5623 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:22.307000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:22.318386 systemd-logind[1210]: New session 21 of user core. Jul 10 00:31:22.319222 systemd[1]: Started session-21.scope. Jul 10 00:31:22.322000 audit[5623]: USER_START pid=5623 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:22.324000 audit[5625]: CRED_ACQ pid=5625 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:22.427445 sshd[5623]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:22.428000 audit[5623]: USER_END pid=5623 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:22.428000 audit[5623]: CRED_DISP pid=5623 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:22.429953 systemd[1]: sshd@20-10.0.0.46:22-10.0.0.1:35166.service: Deactivated successfully. Jul 10 00:31:22.429000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.46:22-10.0.0.1:35166 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:22.430761 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 00:31:22.431324 systemd-logind[1210]: Session 21 logged out. Waiting for processes to exit. Jul 10 00:31:22.432049 systemd-logind[1210]: Removed session 21. Jul 10 00:31:25.891692 systemd[1]: run-containerd-runc-k8s.io-d24637e7367e4dcd6fea63b07a17b2e455b6e953bdea9ae809a177dfc79d5f1b-runc.uC06I0.mount: Deactivated successfully. Jul 10 00:31:26.830522 kubelet[1946]: E0710 00:31:26.830487 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:31:27.432935 systemd[1]: Started sshd@21-10.0.0.46:22-10.0.0.1:41756.service. Jul 10 00:31:27.431000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.46:22-10.0.0.1:41756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:27.434323 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 00:31:27.434399 kernel: audit: type=1130 audit(1752107487.431:1630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.46:22-10.0.0.1:41756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:27.479000 audit[5654]: USER_ACCT pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.480585 sshd[5654]: Accepted publickey for core from 10.0.0.1 port 41756 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:27.484334 kernel: audit: type=1101 audit(1752107487.479:1631): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.483000 audit[5654]: CRED_ACQ pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.485107 sshd[5654]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:27.489777 kernel: audit: type=1103 audit(1752107487.483:1632): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.489862 kernel: audit: type=1006 audit(1752107487.483:1633): pid=5654 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 10 00:31:27.489883 kernel: audit: type=1300 audit(1752107487.483:1633): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff00c2bf0 a2=3 a3=1 items=0 ppid=1 pid=5654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:27.483000 audit[5654]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff00c2bf0 a2=3 a3=1 items=0 ppid=1 pid=5654 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:27.483000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:27.494024 kernel: audit: type=1327 audit(1752107487.483:1633): proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:27.497552 systemd-logind[1210]: New session 22 of user core. Jul 10 00:31:27.498477 systemd[1]: Started session-22.scope. Jul 10 00:31:27.500000 audit[5654]: USER_START pid=5654 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.502000 audit[5656]: CRED_ACQ pid=5656 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.508666 kernel: audit: type=1105 audit(1752107487.500:1634): pid=5654 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.508746 kernel: audit: type=1103 audit(1752107487.502:1635): pid=5656 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.735574 sshd[5654]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:27.735000 audit[5654]: USER_END pid=5654 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.739530 systemd[1]: sshd@21-10.0.0.46:22-10.0.0.1:41756.service: Deactivated successfully. Jul 10 00:31:27.740333 systemd[1]: session-22.scope: Deactivated successfully. Jul 10 00:31:27.736000 audit[5654]: CRED_DISP pid=5654 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.744881 kernel: audit: type=1106 audit(1752107487.735:1636): pid=5654 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.744966 kernel: audit: type=1104 audit(1752107487.736:1637): pid=5654 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:27.738000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.46:22-10.0.0.1:41756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:27.745054 systemd-logind[1210]: Session 22 logged out. Waiting for processes to exit. Jul 10 00:31:27.746083 systemd-logind[1210]: Removed session 22. Jul 10 00:31:29.829947 kubelet[1946]: E0710 00:31:29.829902 1946 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:31:32.740816 systemd[1]: Started sshd@22-10.0.0.46:22-10.0.0.1:38512.service. Jul 10 00:31:32.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.46:22-10.0.0.1:38512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:32.741909 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:31:32.742066 kernel: audit: type=1130 audit(1752107492.739:1639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.46:22-10.0.0.1:38512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:32.788000 audit[5670]: USER_ACCT pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:32.790325 sshd[5670]: Accepted publickey for core from 10.0.0.1 port 38512 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:31:32.791425 sshd[5670]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:31:32.789000 audit[5670]: CRED_ACQ pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:32.796883 kernel: audit: type=1101 audit(1752107492.788:1640): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:32.796967 kernel: audit: type=1103 audit(1752107492.789:1641): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:32.799219 kernel: audit: type=1006 audit(1752107492.789:1642): pid=5670 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 10 00:31:32.799381 kernel: audit: type=1300 audit(1752107492.789:1642): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9d129c0 a2=3 a3=1 items=0 ppid=1 pid=5670 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:32.789000 audit[5670]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd9d129c0 a2=3 a3=1 items=0 ppid=1 pid=5670 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:31:32.789000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:32.804262 kernel: audit: type=1327 audit(1752107492.789:1642): proctitle=737368643A20636F7265205B707269765D Jul 10 00:31:32.805739 systemd-logind[1210]: New session 23 of user core. Jul 10 00:31:32.806594 systemd[1]: Started session-23.scope. Jul 10 00:31:32.809000 audit[5670]: USER_START pid=5670 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:32.811000 audit[5672]: CRED_ACQ pid=5672 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:32.823501 kernel: audit: type=1105 audit(1752107492.809:1643): pid=5670 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:32.823589 kernel: audit: type=1103 audit(1752107492.811:1644): pid=5672 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:33.006451 sshd[5670]: pam_unix(sshd:session): session closed for user core Jul 10 00:31:33.006000 audit[5670]: USER_END pid=5670 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:33.010116 systemd[1]: sshd@22-10.0.0.46:22-10.0.0.1:38512.service: Deactivated successfully. Jul 10 00:31:33.010892 systemd[1]: session-23.scope: Deactivated successfully. Jul 10 00:31:33.006000 audit[5670]: CRED_DISP pid=5670 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:33.014419 kernel: audit: type=1106 audit(1752107493.006:1645): pid=5670 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:33.014496 kernel: audit: type=1104 audit(1752107493.006:1646): pid=5670 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:31:33.009000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.46:22-10.0.0.1:38512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:31:33.014959 systemd-logind[1210]: Session 23 logged out. Waiting for processes to exit. Jul 10 00:31:33.015990 systemd-logind[1210]: Removed session 23.