Jul 10 00:21:54.726748 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 10 00:21:54.726767 kernel: Linux version 5.15.186-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Wed Jul 9 23:19:15 -00 2025 Jul 10 00:21:54.726775 kernel: efi: EFI v2.70 by EDK II Jul 10 00:21:54.726781 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 10 00:21:54.726786 kernel: random: crng init done Jul 10 00:21:54.726792 kernel: ACPI: Early table checksum verification disabled Jul 10 00:21:54.726798 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 10 00:21:54.726805 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 10 00:21:54.726811 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:21:54.726816 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:21:54.726822 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:21:54.726827 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:21:54.726832 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:21:54.726838 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:21:54.726846 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:21:54.726852 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:21:54.726858 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 10 00:21:54.726864 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 10 00:21:54.726876 kernel: NUMA: Failed to initialise from firmware Jul 10 00:21:54.726883 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 10 00:21:54.726889 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Jul 10 00:21:54.726894 kernel: Zone ranges: Jul 10 00:21:54.726900 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 10 00:21:54.726907 kernel: DMA32 empty Jul 10 00:21:54.726913 kernel: Normal empty Jul 10 00:21:54.726919 kernel: Movable zone start for each node Jul 10 00:21:54.726924 kernel: Early memory node ranges Jul 10 00:21:54.726930 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 10 00:21:54.726936 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 10 00:21:54.726942 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 10 00:21:54.726947 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 10 00:21:54.726953 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 10 00:21:54.726959 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 10 00:21:54.726964 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 10 00:21:54.726970 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 10 00:21:54.726977 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 10 00:21:54.726983 kernel: psci: probing for conduit method from ACPI. Jul 10 00:21:54.726989 kernel: psci: PSCIv1.1 detected in firmware. Jul 10 00:21:54.726994 kernel: psci: Using standard PSCI v0.2 function IDs Jul 10 00:21:54.727000 kernel: psci: Trusted OS migration not required Jul 10 00:21:54.727009 kernel: psci: SMC Calling Convention v1.1 Jul 10 00:21:54.727015 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 10 00:21:54.727022 kernel: ACPI: SRAT not present Jul 10 00:21:54.727029 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 10 00:21:54.727035 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 10 00:21:54.727041 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 10 00:21:54.727047 kernel: Detected PIPT I-cache on CPU0 Jul 10 00:21:54.727054 kernel: CPU features: detected: GIC system register CPU interface Jul 10 00:21:54.727060 kernel: CPU features: detected: Hardware dirty bit management Jul 10 00:21:54.727066 kernel: CPU features: detected: Spectre-v4 Jul 10 00:21:54.727072 kernel: CPU features: detected: Spectre-BHB Jul 10 00:21:54.727079 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 10 00:21:54.727085 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 10 00:21:54.727092 kernel: CPU features: detected: ARM erratum 1418040 Jul 10 00:21:54.727098 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 10 00:21:54.727104 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 10 00:21:54.727110 kernel: Policy zone: DMA Jul 10 00:21:54.727117 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=97626bbec4e8c603c151f40dbbae5fabba3cda417023e06335ea30183b36a27f Jul 10 00:21:54.727124 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 10 00:21:54.727130 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 10 00:21:54.727136 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 10 00:21:54.727143 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 10 00:21:54.727150 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Jul 10 00:21:54.727157 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 10 00:21:54.727163 kernel: trace event string verifier disabled Jul 10 00:21:54.727169 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 10 00:21:54.727176 kernel: rcu: RCU event tracing is enabled. Jul 10 00:21:54.727182 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 10 00:21:54.727188 kernel: Trampoline variant of Tasks RCU enabled. Jul 10 00:21:54.727195 kernel: Tracing variant of Tasks RCU enabled. Jul 10 00:21:54.727201 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 10 00:21:54.727207 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 10 00:21:54.727213 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 10 00:21:54.727220 kernel: GICv3: 256 SPIs implemented Jul 10 00:21:54.727227 kernel: GICv3: 0 Extended SPIs implemented Jul 10 00:21:54.727233 kernel: GICv3: Distributor has no Range Selector support Jul 10 00:21:54.727239 kernel: Root IRQ handler: gic_handle_irq Jul 10 00:21:54.727245 kernel: GICv3: 16 PPIs implemented Jul 10 00:21:54.727251 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 10 00:21:54.727258 kernel: ACPI: SRAT not present Jul 10 00:21:54.727264 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 10 00:21:54.727270 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 10 00:21:54.727277 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 10 00:21:54.727283 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 10 00:21:54.727289 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 10 00:21:54.727296 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:21:54.727302 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 10 00:21:54.727309 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 10 00:21:54.727315 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 10 00:21:54.727321 kernel: arm-pv: using stolen time PV Jul 10 00:21:54.727328 kernel: Console: colour dummy device 80x25 Jul 10 00:21:54.727334 kernel: ACPI: Core revision 20210730 Jul 10 00:21:54.727340 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 10 00:21:54.727347 kernel: pid_max: default: 32768 minimum: 301 Jul 10 00:21:54.727353 kernel: LSM: Security Framework initializing Jul 10 00:21:54.727360 kernel: SELinux: Initializing. Jul 10 00:21:54.727367 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:21:54.727373 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 10 00:21:54.727380 kernel: rcu: Hierarchical SRCU implementation. Jul 10 00:21:54.727386 kernel: Platform MSI: ITS@0x8080000 domain created Jul 10 00:21:54.727392 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 10 00:21:54.727398 kernel: Remapping and enabling EFI services. Jul 10 00:21:54.727404 kernel: smp: Bringing up secondary CPUs ... Jul 10 00:21:54.727410 kernel: Detected PIPT I-cache on CPU1 Jul 10 00:21:54.727419 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 10 00:21:54.727425 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 10 00:21:54.727432 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:21:54.727438 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 10 00:21:54.727444 kernel: Detected PIPT I-cache on CPU2 Jul 10 00:21:54.727451 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 10 00:21:54.727457 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 10 00:21:54.727464 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:21:54.727470 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 10 00:21:54.727476 kernel: Detected PIPT I-cache on CPU3 Jul 10 00:21:54.727484 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 10 00:21:54.727490 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 10 00:21:54.727496 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 10 00:21:54.727503 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 10 00:21:54.727524 kernel: smp: Brought up 1 node, 4 CPUs Jul 10 00:21:54.727533 kernel: SMP: Total of 4 processors activated. Jul 10 00:21:54.727554 kernel: CPU features: detected: 32-bit EL0 Support Jul 10 00:21:54.727562 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 10 00:21:54.727568 kernel: CPU features: detected: Common not Private translations Jul 10 00:21:54.727575 kernel: CPU features: detected: CRC32 instructions Jul 10 00:21:54.727581 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 10 00:21:54.727588 kernel: CPU features: detected: LSE atomic instructions Jul 10 00:21:54.727596 kernel: CPU features: detected: Privileged Access Never Jul 10 00:21:54.727603 kernel: CPU features: detected: RAS Extension Support Jul 10 00:21:54.727609 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 10 00:21:54.727616 kernel: CPU: All CPU(s) started at EL1 Jul 10 00:21:54.727623 kernel: alternatives: patching kernel code Jul 10 00:21:54.727631 kernel: devtmpfs: initialized Jul 10 00:21:54.727637 kernel: KASLR enabled Jul 10 00:21:54.727644 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 10 00:21:54.727651 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 10 00:21:54.727657 kernel: pinctrl core: initialized pinctrl subsystem Jul 10 00:21:54.727664 kernel: SMBIOS 3.0.0 present. Jul 10 00:21:54.727670 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 10 00:21:54.727677 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 10 00:21:54.727684 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 10 00:21:54.727692 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 10 00:21:54.727699 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 10 00:21:54.727706 kernel: audit: initializing netlink subsys (disabled) Jul 10 00:21:54.727712 kernel: audit: type=2000 audit(0.042:1): state=initialized audit_enabled=0 res=1 Jul 10 00:21:54.727719 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 10 00:21:54.727725 kernel: cpuidle: using governor menu Jul 10 00:21:54.727732 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 10 00:21:54.727739 kernel: ASID allocator initialised with 32768 entries Jul 10 00:21:54.727745 kernel: ACPI: bus type PCI registered Jul 10 00:21:54.727753 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 10 00:21:54.727760 kernel: Serial: AMBA PL011 UART driver Jul 10 00:21:54.727767 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 10 00:21:54.727774 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 10 00:21:54.727780 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 10 00:21:54.727787 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 10 00:21:54.727794 kernel: cryptd: max_cpu_qlen set to 1000 Jul 10 00:21:54.727801 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 10 00:21:54.727808 kernel: ACPI: Added _OSI(Module Device) Jul 10 00:21:54.727816 kernel: ACPI: Added _OSI(Processor Device) Jul 10 00:21:54.727823 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 10 00:21:54.727830 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 10 00:21:54.727837 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 10 00:21:54.727843 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 10 00:21:54.727850 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 10 00:21:54.727857 kernel: ACPI: Interpreter enabled Jul 10 00:21:54.727864 kernel: ACPI: Using GIC for interrupt routing Jul 10 00:21:54.727874 kernel: ACPI: MCFG table detected, 1 entries Jul 10 00:21:54.727883 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 10 00:21:54.727890 kernel: printk: console [ttyAMA0] enabled Jul 10 00:21:54.727897 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 10 00:21:54.728029 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 10 00:21:54.728096 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 10 00:21:54.728158 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 10 00:21:54.728286 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 10 00:21:54.728362 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 10 00:21:54.728372 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 10 00:21:54.728379 kernel: PCI host bridge to bus 0000:00 Jul 10 00:21:54.728447 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 10 00:21:54.728502 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 10 00:21:54.728581 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 10 00:21:54.728638 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 10 00:21:54.728716 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 10 00:21:54.728787 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 10 00:21:54.728851 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 10 00:21:54.728923 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 10 00:21:54.728983 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 10 00:21:54.729042 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 10 00:21:54.729102 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 10 00:21:54.729165 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 10 00:21:54.729217 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 10 00:21:54.729268 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 10 00:21:54.729319 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 10 00:21:54.729328 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 10 00:21:54.729335 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 10 00:21:54.729342 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 10 00:21:54.729348 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 10 00:21:54.729356 kernel: iommu: Default domain type: Translated Jul 10 00:21:54.729363 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 10 00:21:54.729369 kernel: vgaarb: loaded Jul 10 00:21:54.729376 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 10 00:21:54.729383 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 10 00:21:54.729389 kernel: PTP clock support registered Jul 10 00:21:54.729396 kernel: Registered efivars operations Jul 10 00:21:54.729403 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 10 00:21:54.729409 kernel: VFS: Disk quotas dquot_6.6.0 Jul 10 00:21:54.729418 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 10 00:21:54.729425 kernel: pnp: PnP ACPI init Jul 10 00:21:54.729488 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 10 00:21:54.729498 kernel: pnp: PnP ACPI: found 1 devices Jul 10 00:21:54.729504 kernel: NET: Registered PF_INET protocol family Jul 10 00:21:54.729511 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 10 00:21:54.729553 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 10 00:21:54.729560 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 10 00:21:54.729569 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 10 00:21:54.729576 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 10 00:21:54.729582 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 10 00:21:54.729589 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:21:54.729595 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 10 00:21:54.729602 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 10 00:21:54.729609 kernel: PCI: CLS 0 bytes, default 64 Jul 10 00:21:54.729615 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 10 00:21:54.729622 kernel: kvm [1]: HYP mode not available Jul 10 00:21:54.729630 kernel: Initialise system trusted keyrings Jul 10 00:21:54.729637 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 10 00:21:54.729644 kernel: Key type asymmetric registered Jul 10 00:21:54.729650 kernel: Asymmetric key parser 'x509' registered Jul 10 00:21:54.729657 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 10 00:21:54.729663 kernel: io scheduler mq-deadline registered Jul 10 00:21:54.729670 kernel: io scheduler kyber registered Jul 10 00:21:54.729677 kernel: io scheduler bfq registered Jul 10 00:21:54.729684 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 10 00:21:54.729692 kernel: ACPI: button: Power Button [PWRB] Jul 10 00:21:54.729699 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 10 00:21:54.729766 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 10 00:21:54.729775 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 10 00:21:54.729781 kernel: thunder_xcv, ver 1.0 Jul 10 00:21:54.729788 kernel: thunder_bgx, ver 1.0 Jul 10 00:21:54.729794 kernel: nicpf, ver 1.0 Jul 10 00:21:54.729801 kernel: nicvf, ver 1.0 Jul 10 00:21:54.729876 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 10 00:21:54.729935 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-10T00:21:54 UTC (1752106914) Jul 10 00:21:54.729944 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 10 00:21:54.729950 kernel: NET: Registered PF_INET6 protocol family Jul 10 00:21:54.729957 kernel: Segment Routing with IPv6 Jul 10 00:21:54.729963 kernel: In-situ OAM (IOAM) with IPv6 Jul 10 00:21:54.729970 kernel: NET: Registered PF_PACKET protocol family Jul 10 00:21:54.729977 kernel: Key type dns_resolver registered Jul 10 00:21:54.729984 kernel: registered taskstats version 1 Jul 10 00:21:54.729992 kernel: Loading compiled-in X.509 certificates Jul 10 00:21:54.729998 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.186-flatcar: 9e274a0dc4fc3d34232d90d226b034c4fe0e3e22' Jul 10 00:21:54.730005 kernel: Key type .fscrypt registered Jul 10 00:21:54.730012 kernel: Key type fscrypt-provisioning registered Jul 10 00:21:54.730018 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 10 00:21:54.730025 kernel: ima: Allocated hash algorithm: sha1 Jul 10 00:21:54.730032 kernel: ima: No architecture policies found Jul 10 00:21:54.730038 kernel: clk: Disabling unused clocks Jul 10 00:21:54.730045 kernel: Freeing unused kernel memory: 36416K Jul 10 00:21:54.730053 kernel: Run /init as init process Jul 10 00:21:54.730059 kernel: with arguments: Jul 10 00:21:54.730066 kernel: /init Jul 10 00:21:54.730072 kernel: with environment: Jul 10 00:21:54.730079 kernel: HOME=/ Jul 10 00:21:54.730085 kernel: TERM=linux Jul 10 00:21:54.730092 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 10 00:21:54.730101 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:21:54.730111 systemd[1]: Detected virtualization kvm. Jul 10 00:21:54.730118 systemd[1]: Detected architecture arm64. Jul 10 00:21:54.730126 systemd[1]: Running in initrd. Jul 10 00:21:54.730132 systemd[1]: No hostname configured, using default hostname. Jul 10 00:21:54.730139 systemd[1]: Hostname set to . Jul 10 00:21:54.730146 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:21:54.730153 systemd[1]: Queued start job for default target initrd.target. Jul 10 00:21:54.730160 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:21:54.730168 systemd[1]: Reached target cryptsetup.target. Jul 10 00:21:54.730175 systemd[1]: Reached target paths.target. Jul 10 00:21:54.730182 systemd[1]: Reached target slices.target. Jul 10 00:21:54.730189 systemd[1]: Reached target swap.target. Jul 10 00:21:54.730207 systemd[1]: Reached target timers.target. Jul 10 00:21:54.730215 systemd[1]: Listening on iscsid.socket. Jul 10 00:21:54.730222 systemd[1]: Listening on iscsiuio.socket. Jul 10 00:21:54.730231 systemd[1]: Listening on systemd-journald-audit.socket. Jul 10 00:21:54.730238 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 10 00:21:54.730245 systemd[1]: Listening on systemd-journald.socket. Jul 10 00:21:54.730252 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:21:54.730259 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:21:54.730266 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:21:54.730272 systemd[1]: Reached target sockets.target. Jul 10 00:21:54.730279 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:21:54.730286 systemd[1]: Finished network-cleanup.service. Jul 10 00:21:54.730294 systemd[1]: Starting systemd-fsck-usr.service... Jul 10 00:21:54.730301 systemd[1]: Starting systemd-journald.service... Jul 10 00:21:54.730308 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:21:54.730315 systemd[1]: Starting systemd-resolved.service... Jul 10 00:21:54.730322 systemd[1]: Starting systemd-vconsole-setup.service... Jul 10 00:21:54.730329 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:21:54.730336 systemd[1]: Finished systemd-fsck-usr.service. Jul 10 00:21:54.730343 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:21:54.730350 systemd[1]: Finished systemd-vconsole-setup.service. Jul 10 00:21:54.730358 kernel: audit: type=1130 audit(1752106914.727:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.730365 systemd[1]: Starting dracut-cmdline-ask.service... Jul 10 00:21:54.730376 systemd-journald[290]: Journal started Jul 10 00:21:54.730415 systemd-journald[290]: Runtime Journal (/run/log/journal/49e340b40b2144ab9e0a2efd3f82862c) is 6.0M, max 48.7M, 42.6M free. Jul 10 00:21:54.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.721783 systemd-modules-load[291]: Inserted module 'overlay' Jul 10 00:21:54.731790 systemd[1]: Started systemd-journald.service. Jul 10 00:21:54.731000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.732530 kernel: audit: type=1130 audit(1752106914.731:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.732807 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:21:54.737034 kernel: audit: type=1130 audit(1752106914.734:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.744544 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 10 00:21:54.746484 systemd[1]: Finished dracut-cmdline-ask.service. Jul 10 00:21:54.751178 kernel: audit: type=1130 audit(1752106914.747:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.751197 kernel: Bridge firewalling registered Jul 10 00:21:54.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.748004 systemd[1]: Starting dracut-cmdline.service... Jul 10 00:21:54.749986 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 10 00:21:54.760297 systemd-resolved[292]: Positive Trust Anchors: Jul 10 00:21:54.760312 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:21:54.760340 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:21:54.765873 dracut-cmdline[308]: dracut-dracut-053 Jul 10 00:21:54.769027 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=97626bbec4e8c603c151f40dbbae5fabba3cda417023e06335ea30183b36a27f Jul 10 00:21:54.770825 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 10 00:21:54.776689 kernel: SCSI subsystem initialized Jul 10 00:21:54.776712 kernel: audit: type=1130 audit(1752106914.773:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.773000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.773667 systemd[1]: Started systemd-resolved.service. Jul 10 00:21:54.774356 systemd[1]: Reached target nss-lookup.target. Jul 10 00:21:54.781820 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 10 00:21:54.781874 kernel: device-mapper: uevent: version 1.0.3 Jul 10 00:21:54.781889 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 10 00:21:54.784523 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 10 00:21:54.785330 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:21:54.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.786765 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:21:54.789533 kernel: audit: type=1130 audit(1752106914.785:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.795044 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:21:54.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.798540 kernel: audit: type=1130 audit(1752106914.795:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.840544 kernel: Loading iSCSI transport class v2.0-870. Jul 10 00:21:54.851542 kernel: iscsi: registered transport (tcp) Jul 10 00:21:54.868545 kernel: iscsi: registered transport (qla4xxx) Jul 10 00:21:54.868596 kernel: QLogic iSCSI HBA Driver Jul 10 00:21:54.904088 systemd[1]: Finished dracut-cmdline.service. Jul 10 00:21:54.910351 kernel: audit: type=1130 audit(1752106914.904:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.904000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:54.905575 systemd[1]: Starting dracut-pre-udev.service... Jul 10 00:21:54.952539 kernel: raid6: neonx8 gen() 13688 MB/s Jul 10 00:21:54.969530 kernel: raid6: neonx8 xor() 10781 MB/s Jul 10 00:21:54.986533 kernel: raid6: neonx4 gen() 13412 MB/s Jul 10 00:21:55.003540 kernel: raid6: neonx4 xor() 11076 MB/s Jul 10 00:21:55.020529 kernel: raid6: neonx2 gen() 12949 MB/s Jul 10 00:21:55.037535 kernel: raid6: neonx2 xor() 10446 MB/s Jul 10 00:21:55.054533 kernel: raid6: neonx1 gen() 10555 MB/s Jul 10 00:21:55.071528 kernel: raid6: neonx1 xor() 8701 MB/s Jul 10 00:21:55.088531 kernel: raid6: int64x8 gen() 6225 MB/s Jul 10 00:21:55.105534 kernel: raid6: int64x8 xor() 3541 MB/s Jul 10 00:21:55.122537 kernel: raid6: int64x4 gen() 7227 MB/s Jul 10 00:21:55.139533 kernel: raid6: int64x4 xor() 3836 MB/s Jul 10 00:21:55.156532 kernel: raid6: int64x2 gen() 6084 MB/s Jul 10 00:21:55.173528 kernel: raid6: int64x2 xor() 3314 MB/s Jul 10 00:21:55.190529 kernel: raid6: int64x1 gen() 5037 MB/s Jul 10 00:21:55.207704 kernel: raid6: int64x1 xor() 2643 MB/s Jul 10 00:21:55.207720 kernel: raid6: using algorithm neonx8 gen() 13688 MB/s Jul 10 00:21:55.207729 kernel: raid6: .... xor() 10781 MB/s, rmw enabled Jul 10 00:21:55.207737 kernel: raid6: using neon recovery algorithm Jul 10 00:21:55.218537 kernel: xor: measuring software checksum speed Jul 10 00:21:55.218560 kernel: 8regs : 16739 MB/sec Jul 10 00:21:55.218569 kernel: 32regs : 19422 MB/sec Jul 10 00:21:55.219819 kernel: arm64_neon : 27719 MB/sec Jul 10 00:21:55.219833 kernel: xor: using function: arm64_neon (27719 MB/sec) Jul 10 00:21:55.274541 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 10 00:21:55.286146 systemd[1]: Finished dracut-pre-udev.service. Jul 10 00:21:55.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:55.288902 systemd[1]: Starting systemd-udevd.service... Jul 10 00:21:55.290167 kernel: audit: type=1130 audit(1752106915.286:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:55.286000 audit: BPF prog-id=7 op=LOAD Jul 10 00:21:55.286000 audit: BPF prog-id=8 op=LOAD Jul 10 00:21:55.300493 systemd-udevd[491]: Using default interface naming scheme 'v252'. Jul 10 00:21:55.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:55.303836 systemd[1]: Started systemd-udevd.service. Jul 10 00:21:55.305349 systemd[1]: Starting dracut-pre-trigger.service... Jul 10 00:21:55.317524 dracut-pre-trigger[497]: rd.md=0: removing MD RAID activation Jul 10 00:21:55.346339 systemd[1]: Finished dracut-pre-trigger.service. Jul 10 00:21:55.346000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:55.347734 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:21:55.386360 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:21:55.386000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:55.414948 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 10 00:21:55.419078 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 10 00:21:55.419092 kernel: GPT:9289727 != 19775487 Jul 10 00:21:55.419101 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 10 00:21:55.419110 kernel: GPT:9289727 != 19775487 Jul 10 00:21:55.419117 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 10 00:21:55.419126 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:21:55.434672 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 10 00:21:55.437735 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (543) Jul 10 00:21:55.436489 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 10 00:21:55.441009 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 10 00:21:55.446747 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 10 00:21:55.450071 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:21:55.451743 systemd[1]: Starting disk-uuid.service... Jul 10 00:21:55.458582 disk-uuid[563]: Primary Header is updated. Jul 10 00:21:55.458582 disk-uuid[563]: Secondary Entries is updated. Jul 10 00:21:55.458582 disk-uuid[563]: Secondary Header is updated. Jul 10 00:21:55.462541 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:21:56.474198 disk-uuid[564]: The operation has completed successfully. Jul 10 00:21:56.475110 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 10 00:21:56.500030 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 10 00:21:56.500125 systemd[1]: Finished disk-uuid.service. Jul 10 00:21:56.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.500000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.501810 systemd[1]: Starting verity-setup.service... Jul 10 00:21:56.525552 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 10 00:21:56.556257 systemd[1]: Found device dev-mapper-usr.device. Jul 10 00:21:56.557858 systemd[1]: Mounting sysusr-usr.mount... Jul 10 00:21:56.560186 systemd[1]: Finished verity-setup.service. Jul 10 00:21:56.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.613226 systemd[1]: Mounted sysusr-usr.mount. Jul 10 00:21:56.614579 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 10 00:21:56.614094 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 10 00:21:56.614926 systemd[1]: Starting ignition-setup.service... Jul 10 00:21:56.617146 systemd[1]: Starting parse-ip-for-networkd.service... Jul 10 00:21:56.624872 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 10 00:21:56.624907 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:21:56.624917 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:21:56.642477 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 10 00:21:56.649949 systemd[1]: Finished ignition-setup.service. Jul 10 00:21:56.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.651419 systemd[1]: Starting ignition-fetch-offline.service... Jul 10 00:21:56.716417 systemd[1]: Finished parse-ip-for-networkd.service. Jul 10 00:21:56.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.717000 audit: BPF prog-id=9 op=LOAD Jul 10 00:21:56.718770 systemd[1]: Starting systemd-networkd.service... Jul 10 00:21:56.744334 systemd-networkd[740]: lo: Link UP Jul 10 00:21:56.744345 systemd-networkd[740]: lo: Gained carrier Jul 10 00:21:56.745000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.744774 systemd-networkd[740]: Enumeration completed Jul 10 00:21:56.744892 systemd[1]: Started systemd-networkd.service. Jul 10 00:21:56.744973 systemd-networkd[740]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:21:56.746018 systemd-networkd[740]: eth0: Link UP Jul 10 00:21:56.746021 systemd-networkd[740]: eth0: Gained carrier Jul 10 00:21:56.746486 systemd[1]: Reached target network.target. Jul 10 00:21:56.748371 systemd[1]: Starting iscsiuio.service... Jul 10 00:21:56.758808 systemd[1]: Started iscsiuio.service. Jul 10 00:21:56.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.760350 systemd[1]: Starting iscsid.service... Jul 10 00:21:56.764199 iscsid[745]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:21:56.764199 iscsid[745]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 10 00:21:56.764199 iscsid[745]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 10 00:21:56.764199 iscsid[745]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 10 00:21:56.764199 iscsid[745]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 10 00:21:56.764199 iscsid[745]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 10 00:21:56.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.767626 systemd[1]: Started iscsid.service. Jul 10 00:21:56.770408 systemd[1]: Starting dracut-initqueue.service... Jul 10 00:21:56.774759 systemd-networkd[740]: eth0: DHCPv4 address 10.0.0.18/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:21:56.781227 systemd[1]: Finished dracut-initqueue.service. Jul 10 00:21:56.781000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.781956 systemd[1]: Reached target remote-fs-pre.target. Jul 10 00:21:56.782880 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:21:56.783974 systemd[1]: Reached target remote-fs.target. Jul 10 00:21:56.785897 systemd[1]: Starting dracut-pre-mount.service... Jul 10 00:21:56.793820 systemd[1]: Finished dracut-pre-mount.service. Jul 10 00:21:56.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.819403 ignition[657]: Ignition 2.14.0 Jul 10 00:21:56.819417 ignition[657]: Stage: fetch-offline Jul 10 00:21:56.819471 ignition[657]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:21:56.819481 ignition[657]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:21:56.819631 ignition[657]: parsed url from cmdline: "" Jul 10 00:21:56.819635 ignition[657]: no config URL provided Jul 10 00:21:56.819639 ignition[657]: reading system config file "/usr/lib/ignition/user.ign" Jul 10 00:21:56.819646 ignition[657]: no config at "/usr/lib/ignition/user.ign" Jul 10 00:21:56.819668 ignition[657]: op(1): [started] loading QEMU firmware config module Jul 10 00:21:56.819673 ignition[657]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 10 00:21:56.826321 ignition[657]: op(1): [finished] loading QEMU firmware config module Jul 10 00:21:56.826349 ignition[657]: QEMU firmware config was not found. Ignoring... Jul 10 00:21:56.864002 ignition[657]: parsing config with SHA512: 6c68837a350f9786dd386d6fa74a5295854d1d23bc4f3ca3aa61e4d260b582ffac1e23cb051ea088d818a43db912a023a4a28879f9058892364568eb5a4c61b3 Jul 10 00:21:56.870082 unknown[657]: fetched base config from "system" Jul 10 00:21:56.870096 unknown[657]: fetched user config from "qemu" Jul 10 00:21:56.870948 ignition[657]: fetch-offline: fetch-offline passed Jul 10 00:21:56.871007 ignition[657]: Ignition finished successfully Jul 10 00:21:56.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.872005 systemd[1]: Finished ignition-fetch-offline.service. Jul 10 00:21:56.872741 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 10 00:21:56.873490 systemd[1]: Starting ignition-kargs.service... Jul 10 00:21:56.882407 ignition[761]: Ignition 2.14.0 Jul 10 00:21:56.882422 ignition[761]: Stage: kargs Jul 10 00:21:56.882506 ignition[761]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:21:56.884399 systemd[1]: Finished ignition-kargs.service. Jul 10 00:21:56.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.882531 ignition[761]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:21:56.883294 ignition[761]: kargs: kargs passed Jul 10 00:21:56.886261 systemd[1]: Starting ignition-disks.service... Jul 10 00:21:56.883328 ignition[761]: Ignition finished successfully Jul 10 00:21:56.892639 ignition[767]: Ignition 2.14.0 Jul 10 00:21:56.892648 ignition[767]: Stage: disks Jul 10 00:21:56.892734 ignition[767]: no configs at "/usr/lib/ignition/base.d" Jul 10 00:21:56.892743 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:21:56.893534 ignition[767]: disks: disks passed Jul 10 00:21:56.895000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.895033 systemd[1]: Finished ignition-disks.service. Jul 10 00:21:56.893575 ignition[767]: Ignition finished successfully Jul 10 00:21:56.896313 systemd[1]: Reached target initrd-root-device.target. Jul 10 00:21:56.897127 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:21:56.898104 systemd[1]: Reached target local-fs.target. Jul 10 00:21:56.899041 systemd[1]: Reached target sysinit.target. Jul 10 00:21:56.900041 systemd[1]: Reached target basic.target. Jul 10 00:21:56.901832 systemd[1]: Starting systemd-fsck-root.service... Jul 10 00:21:56.912359 systemd-fsck[775]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 10 00:21:56.915984 systemd[1]: Finished systemd-fsck-root.service. Jul 10 00:21:56.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.917355 systemd[1]: Mounting sysroot.mount... Jul 10 00:21:56.922265 systemd[1]: Mounted sysroot.mount. Jul 10 00:21:56.923206 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 10 00:21:56.922879 systemd[1]: Reached target initrd-root-fs.target. Jul 10 00:21:56.924657 systemd[1]: Mounting sysroot-usr.mount... Jul 10 00:21:56.925363 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 10 00:21:56.925399 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 10 00:21:56.925421 systemd[1]: Reached target ignition-diskful.target. Jul 10 00:21:56.927379 systemd[1]: Mounted sysroot-usr.mount. Jul 10 00:21:56.929561 systemd[1]: Starting initrd-setup-root.service... Jul 10 00:21:56.933762 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Jul 10 00:21:56.938240 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Jul 10 00:21:56.941852 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Jul 10 00:21:56.945430 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Jul 10 00:21:56.971138 systemd[1]: Finished initrd-setup-root.service. Jul 10 00:21:56.971000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.972493 systemd[1]: Starting ignition-mount.service... Jul 10 00:21:56.973643 systemd[1]: Starting sysroot-boot.service... Jul 10 00:21:56.978582 bash[826]: umount: /sysroot/usr/share/oem: not mounted. Jul 10 00:21:56.986589 ignition[828]: INFO : Ignition 2.14.0 Jul 10 00:21:56.986589 ignition[828]: INFO : Stage: mount Jul 10 00:21:56.987832 ignition[828]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:21:56.987832 ignition[828]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:21:56.987832 ignition[828]: INFO : mount: mount passed Jul 10 00:21:56.987832 ignition[828]: INFO : Ignition finished successfully Jul 10 00:21:56.990436 systemd[1]: Finished ignition-mount.service. Jul 10 00:21:56.991000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:56.992820 systemd[1]: Finished sysroot-boot.service. Jul 10 00:21:56.992000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:57.571153 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 10 00:21:57.577539 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (837) Jul 10 00:21:57.577581 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 10 00:21:57.578671 kernel: BTRFS info (device vda6): using free space tree Jul 10 00:21:57.578690 kernel: BTRFS info (device vda6): has skinny extents Jul 10 00:21:57.582914 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 10 00:21:57.584479 systemd[1]: Starting ignition-files.service... Jul 10 00:21:57.598547 ignition[857]: INFO : Ignition 2.14.0 Jul 10 00:21:57.598547 ignition[857]: INFO : Stage: files Jul 10 00:21:57.599788 ignition[857]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:21:57.599788 ignition[857]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:21:57.599788 ignition[857]: DEBUG : files: compiled without relabeling support, skipping Jul 10 00:21:57.602295 ignition[857]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 10 00:21:57.602295 ignition[857]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 10 00:21:57.606586 ignition[857]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 10 00:21:57.607604 ignition[857]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 10 00:21:57.608485 ignition[857]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 10 00:21:57.608485 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 10 00:21:57.608485 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Jul 10 00:21:57.607912 unknown[857]: wrote ssh authorized keys file for user: core Jul 10 00:21:57.722962 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 10 00:21:57.879337 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 10 00:21:57.879337 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 10 00:21:57.882135 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Jul 10 00:21:58.220662 systemd-networkd[740]: eth0: Gained IPv6LL Jul 10 00:21:58.401460 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 10 00:21:58.948722 ignition[857]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 10 00:21:58.948722 ignition[857]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 10 00:21:58.952496 ignition[857]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:21:58.998894 ignition[857]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 10 00:21:59.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.002040 ignition[857]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 10 00:21:59.002040 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:21:59.002040 ignition[857]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 10 00:21:59.002040 ignition[857]: INFO : files: files passed Jul 10 00:21:59.002040 ignition[857]: INFO : Ignition finished successfully Jul 10 00:21:59.001187 systemd[1]: Finished ignition-files.service. Jul 10 00:21:59.012485 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 10 00:21:59.012509 kernel: audit: type=1130 audit(1752106919.007:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.012532 kernel: audit: type=1131 audit(1752106919.007:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.007000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.007000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.002799 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 10 00:21:59.012000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.015590 kernel: audit: type=1130 audit(1752106919.012:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.003740 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 10 00:21:59.017428 initrd-setup-root-after-ignition[882]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 10 00:21:59.004395 systemd[1]: Starting ignition-quench.service... Jul 10 00:21:59.019530 initrd-setup-root-after-ignition[884]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 10 00:21:59.007387 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 10 00:21:59.007466 systemd[1]: Finished ignition-quench.service. Jul 10 00:21:59.009506 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 10 00:21:59.013181 systemd[1]: Reached target ignition-complete.target. Jul 10 00:21:59.016784 systemd[1]: Starting initrd-parse-etc.service... Jul 10 00:21:59.029932 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 10 00:21:59.030029 systemd[1]: Finished initrd-parse-etc.service. Jul 10 00:21:59.035212 kernel: audit: type=1130 audit(1752106919.030:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.035236 kernel: audit: type=1131 audit(1752106919.030:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.030000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.031291 systemd[1]: Reached target initrd-fs.target. Jul 10 00:21:59.035745 systemd[1]: Reached target initrd.target. Jul 10 00:21:59.036775 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 10 00:21:59.037574 systemd[1]: Starting dracut-pre-pivot.service... Jul 10 00:21:59.048271 systemd[1]: Finished dracut-pre-pivot.service. Jul 10 00:21:59.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.049774 systemd[1]: Starting initrd-cleanup.service... Jul 10 00:21:59.052114 kernel: audit: type=1130 audit(1752106919.048:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.058149 systemd[1]: Stopped target nss-lookup.target. Jul 10 00:21:59.058861 systemd[1]: Stopped target remote-cryptsetup.target. Jul 10 00:21:59.059935 systemd[1]: Stopped target timers.target. Jul 10 00:21:59.060983 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 10 00:21:59.061000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.061090 systemd[1]: Stopped dracut-pre-pivot.service. Jul 10 00:21:59.065201 kernel: audit: type=1131 audit(1752106919.061:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.062094 systemd[1]: Stopped target initrd.target. Jul 10 00:21:59.064803 systemd[1]: Stopped target basic.target. Jul 10 00:21:59.065732 systemd[1]: Stopped target ignition-complete.target. Jul 10 00:21:59.066742 systemd[1]: Stopped target ignition-diskful.target. Jul 10 00:21:59.067699 systemd[1]: Stopped target initrd-root-device.target. Jul 10 00:21:59.068762 systemd[1]: Stopped target remote-fs.target. Jul 10 00:21:59.069771 systemd[1]: Stopped target remote-fs-pre.target. Jul 10 00:21:59.070826 systemd[1]: Stopped target sysinit.target. Jul 10 00:21:59.071785 systemd[1]: Stopped target local-fs.target. Jul 10 00:21:59.072752 systemd[1]: Stopped target local-fs-pre.target. Jul 10 00:21:59.073706 systemd[1]: Stopped target swap.target. Jul 10 00:21:59.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.074577 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 10 00:21:59.078683 kernel: audit: type=1131 audit(1752106919.075:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.074684 systemd[1]: Stopped dracut-pre-mount.service. Jul 10 00:21:59.078000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.075731 systemd[1]: Stopped target cryptsetup.target. Jul 10 00:21:59.084044 kernel: audit: type=1131 audit(1752106919.078:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.084060 kernel: audit: type=1131 audit(1752106919.081:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.081000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.078142 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 10 00:21:59.078241 systemd[1]: Stopped dracut-initqueue.service. Jul 10 00:21:59.079303 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 10 00:21:59.079395 systemd[1]: Stopped ignition-fetch-offline.service. Jul 10 00:21:59.082029 systemd[1]: Stopped target paths.target. Jul 10 00:21:59.084584 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 10 00:21:59.089555 systemd[1]: Stopped systemd-ask-password-console.path. Jul 10 00:21:59.090294 systemd[1]: Stopped target slices.target. Jul 10 00:21:59.091300 systemd[1]: Stopped target sockets.target. Jul 10 00:21:59.092228 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 10 00:21:59.092000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.092331 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 10 00:21:59.093000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.093302 systemd[1]: ignition-files.service: Deactivated successfully. Jul 10 00:21:59.093390 systemd[1]: Stopped ignition-files.service. Jul 10 00:21:59.098459 iscsid[745]: iscsid shutting down. Jul 10 00:21:59.095352 systemd[1]: Stopping ignition-mount.service... Jul 10 00:21:59.096353 systemd[1]: Stopping iscsid.service... Jul 10 00:21:59.101273 systemd[1]: Stopping sysroot-boot.service... Jul 10 00:21:59.102470 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 10 00:21:59.103197 ignition[897]: INFO : Ignition 2.14.0 Jul 10 00:21:59.103197 ignition[897]: INFO : Stage: umount Jul 10 00:21:59.104000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.105028 ignition[897]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 10 00:21:59.105028 ignition[897]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 10 00:21:59.105028 ignition[897]: INFO : umount: umount passed Jul 10 00:21:59.105028 ignition[897]: INFO : Ignition finished successfully Jul 10 00:21:59.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.103720 systemd[1]: Stopped systemd-udev-trigger.service. Jul 10 00:21:59.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.104742 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 10 00:21:59.104833 systemd[1]: Stopped dracut-pre-trigger.service. Jul 10 00:21:59.111000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.107270 systemd[1]: iscsid.service: Deactivated successfully. Jul 10 00:21:59.112000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.107361 systemd[1]: Stopped iscsid.service. Jul 10 00:21:59.114000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.108669 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 10 00:21:59.108739 systemd[1]: Stopped ignition-mount.service. Jul 10 00:21:59.109894 systemd[1]: iscsid.socket: Deactivated successfully. Jul 10 00:21:59.109961 systemd[1]: Closed iscsid.socket. Jul 10 00:21:59.119000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.111005 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 10 00:21:59.121000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.121000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.111051 systemd[1]: Stopped ignition-disks.service. Jul 10 00:21:59.112370 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 10 00:21:59.112409 systemd[1]: Stopped ignition-kargs.service. Jul 10 00:21:59.113554 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 10 00:21:59.113593 systemd[1]: Stopped ignition-setup.service. Jul 10 00:21:59.115174 systemd[1]: Stopping iscsiuio.service... Jul 10 00:21:59.118564 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 10 00:21:59.118995 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 10 00:21:59.119077 systemd[1]: Stopped iscsiuio.service. Jul 10 00:21:59.120297 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 10 00:21:59.120373 systemd[1]: Finished initrd-cleanup.service. Jul 10 00:21:59.121952 systemd[1]: Stopped target network.target. Jul 10 00:21:59.122810 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 10 00:21:59.122844 systemd[1]: Closed iscsiuio.socket. Jul 10 00:21:59.124004 systemd[1]: Stopping systemd-networkd.service... Jul 10 00:21:59.125707 systemd[1]: Stopping systemd-resolved.service... Jul 10 00:21:59.135949 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 10 00:21:59.136053 systemd[1]: Stopped systemd-resolved.service. Jul 10 00:21:59.137000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.142577 systemd-networkd[740]: eth0: DHCPv6 lease lost Jul 10 00:21:59.144075 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 10 00:21:59.144177 systemd[1]: Stopped systemd-networkd.service. Jul 10 00:21:59.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.145685 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 10 00:21:59.145714 systemd[1]: Closed systemd-networkd.socket. Jul 10 00:21:59.147434 systemd[1]: Stopping network-cleanup.service... Jul 10 00:21:59.148000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.148394 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 10 00:21:59.150000 audit: BPF prog-id=6 op=UNLOAD Jul 10 00:21:59.150000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.148450 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 10 00:21:59.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.152000 audit: BPF prog-id=9 op=UNLOAD Jul 10 00:21:59.149540 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 10 00:21:59.149578 systemd[1]: Stopped systemd-sysctl.service. Jul 10 00:21:59.151433 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 10 00:21:59.151472 systemd[1]: Stopped systemd-modules-load.service. Jul 10 00:21:59.157000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.152223 systemd[1]: Stopping systemd-udevd.service... Jul 10 00:21:59.156391 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 10 00:21:59.159000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.156891 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 10 00:21:59.156969 systemd[1]: Stopped sysroot-boot.service. Jul 10 00:21:59.161000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.158578 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 10 00:21:59.162000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.158629 systemd[1]: Stopped initrd-setup-root.service. Jul 10 00:21:59.160594 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 10 00:21:59.160714 systemd[1]: Stopped systemd-udevd.service. Jul 10 00:21:59.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.161985 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 10 00:21:59.166000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.162060 systemd[1]: Stopped network-cleanup.service. Jul 10 00:21:59.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.162772 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 10 00:21:59.162803 systemd[1]: Closed systemd-udevd-control.socket. Jul 10 00:21:59.163867 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 10 00:21:59.170000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.163895 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 10 00:21:59.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.164842 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 10 00:21:59.172000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.164886 systemd[1]: Stopped dracut-pre-udev.service. Jul 10 00:21:59.165957 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 10 00:21:59.165990 systemd[1]: Stopped dracut-cmdline.service. Jul 10 00:21:59.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.166910 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 10 00:21:59.166943 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 10 00:21:59.168735 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 10 00:21:59.169832 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 10 00:21:59.169892 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 10 00:21:59.171590 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 10 00:21:59.171624 systemd[1]: Stopped kmod-static-nodes.service. Jul 10 00:21:59.172232 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 10 00:21:59.172264 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 10 00:21:59.174038 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 10 00:21:59.174421 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 10 00:21:59.174503 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 10 00:21:59.175895 systemd[1]: Reached target initrd-switch-root.target. Jul 10 00:21:59.177429 systemd[1]: Starting initrd-switch-root.service... Jul 10 00:21:59.183737 systemd[1]: Switching root. Jul 10 00:21:59.201706 systemd-journald[290]: Journal stopped Jul 10 00:22:01.181092 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Jul 10 00:22:01.181150 kernel: SELinux: Class mctp_socket not defined in policy. Jul 10 00:22:01.181163 kernel: SELinux: Class anon_inode not defined in policy. Jul 10 00:22:01.181178 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 10 00:22:01.181188 kernel: SELinux: policy capability network_peer_controls=1 Jul 10 00:22:01.181197 kernel: SELinux: policy capability open_perms=1 Jul 10 00:22:01.181209 kernel: SELinux: policy capability extended_socket_class=1 Jul 10 00:22:01.181218 kernel: SELinux: policy capability always_check_network=0 Jul 10 00:22:01.181228 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 10 00:22:01.181238 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 10 00:22:01.181253 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 10 00:22:01.181263 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 10 00:22:01.181273 systemd[1]: Successfully loaded SELinux policy in 32.046ms. Jul 10 00:22:01.181293 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 9.026ms. Jul 10 00:22:01.181304 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 10 00:22:01.181316 systemd[1]: Detected virtualization kvm. Jul 10 00:22:01.181327 systemd[1]: Detected architecture arm64. Jul 10 00:22:01.181337 systemd[1]: Detected first boot. Jul 10 00:22:01.181347 systemd[1]: Initializing machine ID from VM UUID. Jul 10 00:22:01.181357 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 10 00:22:01.181367 systemd[1]: Populated /etc with preset unit settings. Jul 10 00:22:01.181378 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:22:01.181391 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:22:01.181403 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:22:01.181414 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 10 00:22:01.181426 systemd[1]: Stopped initrd-switch-root.service. Jul 10 00:22:01.181437 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 10 00:22:01.181448 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 10 00:22:01.181462 systemd[1]: Created slice system-addon\x2drun.slice. Jul 10 00:22:01.181473 systemd[1]: Created slice system-getty.slice. Jul 10 00:22:01.181483 systemd[1]: Created slice system-modprobe.slice. Jul 10 00:22:01.181498 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 10 00:22:01.181509 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 10 00:22:01.181552 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 10 00:22:01.181566 systemd[1]: Created slice user.slice. Jul 10 00:22:01.181577 systemd[1]: Started systemd-ask-password-console.path. Jul 10 00:22:01.181589 systemd[1]: Started systemd-ask-password-wall.path. Jul 10 00:22:01.181599 systemd[1]: Set up automount boot.automount. Jul 10 00:22:01.181610 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 10 00:22:01.181621 systemd[1]: Stopped target initrd-switch-root.target. Jul 10 00:22:01.181632 systemd[1]: Stopped target initrd-fs.target. Jul 10 00:22:01.181642 systemd[1]: Stopped target initrd-root-fs.target. Jul 10 00:22:01.181654 systemd[1]: Reached target integritysetup.target. Jul 10 00:22:01.181666 systemd[1]: Reached target remote-cryptsetup.target. Jul 10 00:22:01.181676 systemd[1]: Reached target remote-fs.target. Jul 10 00:22:01.181687 systemd[1]: Reached target slices.target. Jul 10 00:22:01.181697 systemd[1]: Reached target swap.target. Jul 10 00:22:01.181708 systemd[1]: Reached target torcx.target. Jul 10 00:22:01.181718 systemd[1]: Reached target veritysetup.target. Jul 10 00:22:01.181729 systemd[1]: Listening on systemd-coredump.socket. Jul 10 00:22:01.181739 systemd[1]: Listening on systemd-initctl.socket. Jul 10 00:22:01.181752 systemd[1]: Listening on systemd-networkd.socket. Jul 10 00:22:01.181763 systemd[1]: Listening on systemd-udevd-control.socket. Jul 10 00:22:01.181773 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 10 00:22:01.181785 systemd[1]: Listening on systemd-userdbd.socket. Jul 10 00:22:01.181796 systemd[1]: Mounting dev-hugepages.mount... Jul 10 00:22:01.181806 systemd[1]: Mounting dev-mqueue.mount... Jul 10 00:22:01.181817 systemd[1]: Mounting media.mount... Jul 10 00:22:01.181827 systemd[1]: Mounting sys-kernel-debug.mount... Jul 10 00:22:01.181838 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 10 00:22:01.181853 systemd[1]: Mounting tmp.mount... Jul 10 00:22:01.181867 systemd[1]: Starting flatcar-tmpfiles.service... Jul 10 00:22:01.181877 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:22:01.181887 systemd[1]: Starting kmod-static-nodes.service... Jul 10 00:22:01.181898 systemd[1]: Starting modprobe@configfs.service... Jul 10 00:22:01.181908 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:22:01.181918 systemd[1]: Starting modprobe@drm.service... Jul 10 00:22:01.181929 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:22:01.181939 systemd[1]: Starting modprobe@fuse.service... Jul 10 00:22:01.181949 systemd[1]: Starting modprobe@loop.service... Jul 10 00:22:01.181961 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 10 00:22:01.181972 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 10 00:22:01.181982 systemd[1]: Stopped systemd-fsck-root.service. Jul 10 00:22:01.181993 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 10 00:22:01.182003 systemd[1]: Stopped systemd-fsck-usr.service. Jul 10 00:22:01.182013 systemd[1]: Stopped systemd-journald.service. Jul 10 00:22:01.182024 systemd[1]: Starting systemd-journald.service... Jul 10 00:22:01.182033 kernel: fuse: init (API version 7.34) Jul 10 00:22:01.182046 systemd[1]: Starting systemd-modules-load.service... Jul 10 00:22:01.182057 kernel: loop: module loaded Jul 10 00:22:01.182067 systemd[1]: Starting systemd-network-generator.service... Jul 10 00:22:01.182078 systemd[1]: Starting systemd-remount-fs.service... Jul 10 00:22:01.182089 systemd[1]: Starting systemd-udev-trigger.service... Jul 10 00:22:01.182100 systemd[1]: verity-setup.service: Deactivated successfully. Jul 10 00:22:01.182109 systemd[1]: Stopped verity-setup.service. Jul 10 00:22:01.182120 systemd[1]: Mounted dev-hugepages.mount. Jul 10 00:22:01.182130 systemd[1]: Mounted dev-mqueue.mount. Jul 10 00:22:01.182141 systemd[1]: Mounted media.mount. Jul 10 00:22:01.182151 systemd[1]: Mounted sys-kernel-debug.mount. Jul 10 00:22:01.182161 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 10 00:22:01.182172 systemd[1]: Mounted tmp.mount. Jul 10 00:22:01.182182 systemd[1]: Finished kmod-static-nodes.service. Jul 10 00:22:01.182193 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 10 00:22:01.182203 systemd[1]: Finished modprobe@configfs.service. Jul 10 00:22:01.182213 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:22:01.182224 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:22:01.182234 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:22:01.182246 systemd-journald[992]: Journal started Jul 10 00:22:01.182288 systemd-journald[992]: Runtime Journal (/run/log/journal/49e340b40b2144ab9e0a2efd3f82862c) is 6.0M, max 48.7M, 42.6M free. Jul 10 00:21:59.256000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 10 00:21:59.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:21:59.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 10 00:21:59.371000 audit: BPF prog-id=10 op=LOAD Jul 10 00:21:59.371000 audit: BPF prog-id=10 op=UNLOAD Jul 10 00:21:59.371000 audit: BPF prog-id=11 op=LOAD Jul 10 00:21:59.371000 audit: BPF prog-id=11 op=UNLOAD Jul 10 00:21:59.410000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 10 00:21:59.410000 audit[930]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001c589c a1=40000c8de0 a2=40000cf0c0 a3=32 items=0 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:21:59.410000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:21:59.411000 audit[930]: AVC avc: denied { associate } for pid=930 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 10 00:21:59.411000 audit[930]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001c5975 a2=1ed a3=0 items=2 ppid=913 pid=930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:21:59.411000 audit: CWD cwd="/" Jul 10 00:21:59.411000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:21:59.411000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:21:59.411000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 10 00:22:01.063000 audit: BPF prog-id=12 op=LOAD Jul 10 00:22:01.063000 audit: BPF prog-id=3 op=UNLOAD Jul 10 00:22:01.063000 audit: BPF prog-id=13 op=LOAD Jul 10 00:22:01.063000 audit: BPF prog-id=14 op=LOAD Jul 10 00:22:01.063000 audit: BPF prog-id=4 op=UNLOAD Jul 10 00:22:01.063000 audit: BPF prog-id=5 op=UNLOAD Jul 10 00:22:01.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.066000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.066000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.075000 audit: BPF prog-id=12 op=UNLOAD Jul 10 00:22:01.141000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.182960 systemd[1]: Finished modprobe@drm.service. Jul 10 00:22:01.144000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.144000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.146000 audit: BPF prog-id=15 op=LOAD Jul 10 00:22:01.146000 audit: BPF prog-id=16 op=LOAD Jul 10 00:22:01.146000 audit: BPF prog-id=17 op=LOAD Jul 10 00:22:01.146000 audit: BPF prog-id=13 op=UNLOAD Jul 10 00:22:01.146000 audit: BPF prog-id=14 op=UNLOAD Jul 10 00:22:01.165000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.175000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.178000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.179000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 10 00:22:01.179000 audit[992]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=fffffe10ca20 a2=4000 a3=1 items=0 ppid=1 pid=992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:01.179000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 10 00:22:01.181000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.181000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.408988 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:22:01.062148 systemd[1]: Queued start job for default target multi-user.target. Jul 10 00:21:59.409206 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:22:01.062161 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 10 00:22:01.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:21:59.409223 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:22:01.064800 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 10 00:21:59.409250 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 10 00:21:59.409259 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 10 00:21:59.409284 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 10 00:21:59.409295 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 10 00:21:59.409483 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 10 00:21:59.409531 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 10 00:21:59.409547 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 10 00:21:59.410106 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 10 00:21:59.410141 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 10 00:21:59.410158 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.7: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.7 Jul 10 00:21:59.410172 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 10 00:21:59.410188 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.7: no such file or directory" path=/var/lib/torcx/store/3510.3.7 Jul 10 00:22:01.184609 systemd[1]: Started systemd-journald.service. Jul 10 00:21:59.410200 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:21:59Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 10 00:22:01.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:00.825099 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:22:00Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:22:00.825360 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:22:00Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:22:00.825457 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:22:00Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:22:00.825632 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:22:00Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 10 00:22:00.825683 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:22:00Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 10 00:22:00.825738 /usr/lib/systemd/system-generators/torcx-generator[930]: time="2025-07-10T00:22:00Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 10 00:22:01.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.185279 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:22:01.185422 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:22:01.186453 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 10 00:22:01.186792 systemd[1]: Finished modprobe@fuse.service. Jul 10 00:22:01.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.186000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.187698 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:22:01.187834 systemd[1]: Finished modprobe@loop.service. Jul 10 00:22:01.187000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.187000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.188721 systemd[1]: Finished systemd-modules-load.service. Jul 10 00:22:01.188000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.189703 systemd[1]: Finished systemd-network-generator.service. Jul 10 00:22:01.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.190000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.190651 systemd[1]: Finished systemd-remount-fs.service. Jul 10 00:22:01.191923 systemd[1]: Reached target network-pre.target. Jul 10 00:22:01.193655 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 10 00:22:01.195448 systemd[1]: Mounting sys-kernel-config.mount... Jul 10 00:22:01.196077 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 10 00:22:01.197615 systemd[1]: Starting systemd-hwdb-update.service... Jul 10 00:22:01.199487 systemd[1]: Starting systemd-journal-flush.service... Jul 10 00:22:01.200232 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:22:01.201235 systemd[1]: Starting systemd-random-seed.service... Jul 10 00:22:01.202018 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:22:01.203024 systemd[1]: Starting systemd-sysctl.service... Jul 10 00:22:01.205034 systemd[1]: Finished flatcar-tmpfiles.service. Jul 10 00:22:01.205000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.206755 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 10 00:22:01.207572 systemd[1]: Mounted sys-kernel-config.mount. Jul 10 00:22:01.209386 systemd[1]: Starting systemd-sysusers.service... Jul 10 00:22:01.213906 systemd[1]: Finished systemd-udev-trigger.service. Jul 10 00:22:01.214000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.215719 systemd[1]: Starting systemd-udev-settle.service... Jul 10 00:22:01.215797 systemd-journald[992]: Time spent on flushing to /var/log/journal/49e340b40b2144ab9e0a2efd3f82862c is 14.983ms for 996 entries. Jul 10 00:22:01.215797 systemd-journald[992]: System Journal (/var/log/journal/49e340b40b2144ab9e0a2efd3f82862c) is 8.0M, max 195.6M, 187.6M free. Jul 10 00:22:01.239587 systemd-journald[992]: Received client request to flush runtime journal. Jul 10 00:22:01.220000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.230000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.220145 systemd[1]: Finished systemd-random-seed.service. Jul 10 00:22:01.222762 systemd[1]: Reached target first-boot-complete.target. Jul 10 00:22:01.240085 udevadm[1031]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 10 00:22:01.230889 systemd[1]: Finished systemd-sysctl.service. Jul 10 00:22:01.231716 systemd[1]: Finished systemd-sysusers.service. Jul 10 00:22:01.233356 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 10 00:22:01.240546 systemd[1]: Finished systemd-journal-flush.service. Jul 10 00:22:01.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.248919 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 10 00:22:01.249000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.576000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.576655 systemd[1]: Finished systemd-hwdb-update.service. Jul 10 00:22:01.577000 audit: BPF prog-id=18 op=LOAD Jul 10 00:22:01.577000 audit: BPF prog-id=19 op=LOAD Jul 10 00:22:01.577000 audit: BPF prog-id=7 op=UNLOAD Jul 10 00:22:01.577000 audit: BPF prog-id=8 op=UNLOAD Jul 10 00:22:01.578768 systemd[1]: Starting systemd-udevd.service... Jul 10 00:22:01.598216 systemd-udevd[1036]: Using default interface naming scheme 'v252'. Jul 10 00:22:01.611451 systemd[1]: Started systemd-udevd.service. Jul 10 00:22:01.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.612000 audit: BPF prog-id=20 op=LOAD Jul 10 00:22:01.613907 systemd[1]: Starting systemd-networkd.service... Jul 10 00:22:01.618000 audit: BPF prog-id=21 op=LOAD Jul 10 00:22:01.618000 audit: BPF prog-id=22 op=LOAD Jul 10 00:22:01.618000 audit: BPF prog-id=23 op=LOAD Jul 10 00:22:01.619418 systemd[1]: Starting systemd-userdbd.service... Jul 10 00:22:01.643978 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 10 00:22:01.649364 systemd[1]: Started systemd-userdbd.service. Jul 10 00:22:01.650000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.696176 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 10 00:22:01.718866 systemd[1]: Finished systemd-udev-settle.service. Jul 10 00:22:01.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.721072 systemd[1]: Starting lvm2-activation-early.service... Jul 10 00:22:01.721188 systemd-networkd[1038]: lo: Link UP Jul 10 00:22:01.721202 systemd-networkd[1038]: lo: Gained carrier Jul 10 00:22:01.721659 systemd-networkd[1038]: Enumeration completed Jul 10 00:22:01.721765 systemd-networkd[1038]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 10 00:22:01.722069 systemd[1]: Started systemd-networkd.service. Jul 10 00:22:01.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.726648 systemd-networkd[1038]: eth0: Link UP Jul 10 00:22:01.726657 systemd-networkd[1038]: eth0: Gained carrier Jul 10 00:22:01.737625 lvm[1069]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:22:01.753643 systemd-networkd[1038]: eth0: DHCPv4 address 10.0.0.18/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 10 00:22:01.772216 systemd[1]: Finished lvm2-activation-early.service. Jul 10 00:22:01.772000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.773288 systemd[1]: Reached target cryptsetup.target. Jul 10 00:22:01.775329 systemd[1]: Starting lvm2-activation.service... Jul 10 00:22:01.778889 lvm[1070]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 10 00:22:01.811380 systemd[1]: Finished lvm2-activation.service. Jul 10 00:22:01.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.812429 systemd[1]: Reached target local-fs-pre.target. Jul 10 00:22:01.813346 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 10 00:22:01.813377 systemd[1]: Reached target local-fs.target. Jul 10 00:22:01.814218 systemd[1]: Reached target machines.target. Jul 10 00:22:01.816268 systemd[1]: Starting ldconfig.service... Jul 10 00:22:01.817389 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:22:01.817440 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:22:01.818640 systemd[1]: Starting systemd-boot-update.service... Jul 10 00:22:01.820482 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 10 00:22:01.822707 systemd[1]: Starting systemd-machine-id-commit.service... Jul 10 00:22:01.825697 systemd[1]: Starting systemd-sysext.service... Jul 10 00:22:01.826984 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1072 (bootctl) Jul 10 00:22:01.828176 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 10 00:22:01.844445 systemd[1]: Unmounting usr-share-oem.mount... Jul 10 00:22:01.846363 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 10 00:22:01.847000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.851860 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 10 00:22:01.852070 systemd[1]: Unmounted usr-share-oem.mount. Jul 10 00:22:01.904691 systemd[1]: Finished systemd-machine-id-commit.service. Jul 10 00:22:01.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.909535 kernel: loop0: detected capacity change from 0 to 207008 Jul 10 00:22:01.918817 systemd-fsck[1082]: fsck.fat 4.2 (2021-01-31) Jul 10 00:22:01.918817 systemd-fsck[1082]: /dev/vda1: 236 files, 117310/258078 clusters Jul 10 00:22:01.919529 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 10 00:22:01.920373 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 10 00:22:01.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.941560 kernel: loop1: detected capacity change from 0 to 207008 Jul 10 00:22:01.946709 (sd-sysext)[1086]: Using extensions 'kubernetes'. Jul 10 00:22:01.947053 (sd-sysext)[1086]: Merged extensions into '/usr'. Jul 10 00:22:01.962375 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:22:01.963736 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:22:01.965803 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:22:01.967807 systemd[1]: Starting modprobe@loop.service... Jul 10 00:22:01.970774 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:22:01.970916 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:22:01.971768 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:22:01.971914 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:22:01.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.973281 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:22:01.973394 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:22:01.973000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.973000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.974800 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:22:01.974926 systemd[1]: Finished modprobe@loop.service. Jul 10 00:22:01.975000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:01.976240 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:22:01.976336 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.014031 ldconfig[1071]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 10 00:22:02.017297 systemd[1]: Finished ldconfig.service. Jul 10 00:22:02.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.167354 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 10 00:22:02.169186 systemd[1]: Mounting boot.mount... Jul 10 00:22:02.170970 systemd[1]: Mounting usr-share-oem.mount... Jul 10 00:22:02.176790 systemd[1]: Mounted boot.mount. Jul 10 00:22:02.177730 systemd[1]: Mounted usr-share-oem.mount. Jul 10 00:22:02.179000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.179572 systemd[1]: Finished systemd-sysext.service. Jul 10 00:22:02.181624 systemd[1]: Starting ensure-sysext.service... Jul 10 00:22:02.183429 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 10 00:22:02.184626 systemd[1]: Finished systemd-boot-update.service. Jul 10 00:22:02.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.188501 systemd[1]: Reloading. Jul 10 00:22:02.193003 systemd-tmpfiles[1094]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 10 00:22:02.194444 systemd-tmpfiles[1094]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 10 00:22:02.195926 systemd-tmpfiles[1094]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 10 00:22:02.216267 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-07-10T00:22:02Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:22:02.216293 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-07-10T00:22:02Z" level=info msg="torcx already run" Jul 10 00:22:02.283051 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:22:02.283069 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:22:02.298465 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:22:02.341000 audit: BPF prog-id=24 op=LOAD Jul 10 00:22:02.341000 audit: BPF prog-id=20 op=UNLOAD Jul 10 00:22:02.342000 audit: BPF prog-id=25 op=LOAD Jul 10 00:22:02.342000 audit: BPF prog-id=21 op=UNLOAD Jul 10 00:22:02.342000 audit: BPF prog-id=26 op=LOAD Jul 10 00:22:02.342000 audit: BPF prog-id=27 op=LOAD Jul 10 00:22:02.342000 audit: BPF prog-id=22 op=UNLOAD Jul 10 00:22:02.342000 audit: BPF prog-id=23 op=UNLOAD Jul 10 00:22:02.343000 audit: BPF prog-id=28 op=LOAD Jul 10 00:22:02.343000 audit: BPF prog-id=15 op=UNLOAD Jul 10 00:22:02.343000 audit: BPF prog-id=29 op=LOAD Jul 10 00:22:02.343000 audit: BPF prog-id=30 op=LOAD Jul 10 00:22:02.343000 audit: BPF prog-id=16 op=UNLOAD Jul 10 00:22:02.343000 audit: BPF prog-id=17 op=UNLOAD Jul 10 00:22:02.344000 audit: BPF prog-id=31 op=LOAD Jul 10 00:22:02.344000 audit: BPF prog-id=32 op=LOAD Jul 10 00:22:02.344000 audit: BPF prog-id=18 op=UNLOAD Jul 10 00:22:02.344000 audit: BPF prog-id=19 op=UNLOAD Jul 10 00:22:02.346336 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 10 00:22:02.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.350803 systemd[1]: Starting audit-rules.service... Jul 10 00:22:02.352547 systemd[1]: Starting clean-ca-certificates.service... Jul 10 00:22:02.357000 audit: BPF prog-id=33 op=LOAD Jul 10 00:22:02.354643 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 10 00:22:02.358833 systemd[1]: Starting systemd-resolved.service... Jul 10 00:22:02.359000 audit: BPF prog-id=34 op=LOAD Jul 10 00:22:02.361403 systemd[1]: Starting systemd-timesyncd.service... Jul 10 00:22:02.363246 systemd[1]: Starting systemd-update-utmp.service... Jul 10 00:22:02.367697 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.368870 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:22:02.369000 audit[1164]: SYSTEM_BOOT pid=1164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.371403 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:22:02.373292 systemd[1]: Starting modprobe@loop.service... Jul 10 00:22:02.374196 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.374323 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:22:02.375170 systemd[1]: Finished clean-ca-certificates.service. Jul 10 00:22:02.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.376583 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 10 00:22:02.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.378090 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:22:02.378203 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:22:02.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.379508 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:22:02.379636 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:22:02.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.381188 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:22:02.381294 systemd[1]: Finished modprobe@loop.service. Jul 10 00:22:02.377000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.377000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.384499 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:22:02.384677 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.386195 systemd[1]: Starting systemd-update-done.service... Jul 10 00:22:02.387225 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:22:02.389914 systemd[1]: Finished systemd-update-utmp.service. Jul 10 00:22:02.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.392084 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.393580 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:22:02.395732 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:22:02.397815 systemd[1]: Starting modprobe@loop.service... Jul 10 00:22:02.398601 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.398772 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:22:02.398900 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:22:02.399874 systemd[1]: Finished systemd-update-done.service. Jul 10 00:22:02.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.401116 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:22:02.401233 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:22:02.401000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.401000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.402487 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:22:02.402721 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:22:02.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.403974 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:22:02.404088 systemd[1]: Finished modprobe@loop.service. Jul 10 00:22:02.402000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:02.405000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 10 00:22:02.405000 audit[1180]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd07394f0 a2=420 a3=0 items=0 ppid=1153 pid=1180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:02.405000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 10 00:22:02.406470 augenrules[1180]: No rules Jul 10 00:22:02.407579 systemd[1]: Finished audit-rules.service. Jul 10 00:22:02.408915 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.410265 systemd[1]: Starting modprobe@dm_mod.service... Jul 10 00:22:02.412493 systemd[1]: Starting modprobe@drm.service... Jul 10 00:22:02.414667 systemd[1]: Starting modprobe@efi_pstore.service... Jul 10 00:22:02.416758 systemd[1]: Starting modprobe@loop.service... Jul 10 00:22:02.417622 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.417754 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:22:02.419071 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 10 00:22:02.420111 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 10 00:22:02.421176 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 10 00:22:02.421295 systemd[1]: Finished modprobe@dm_mod.service. Jul 10 00:22:02.422612 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 10 00:22:02.422725 systemd[1]: Finished modprobe@drm.service. Jul 10 00:22:02.423879 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 10 00:22:02.423995 systemd[1]: Finished modprobe@efi_pstore.service. Jul 10 00:22:02.425260 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 10 00:22:02.425375 systemd[1]: Finished modprobe@loop.service. Jul 10 00:22:02.426694 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 10 00:22:02.426782 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.427942 systemd[1]: Finished ensure-sysext.service. Jul 10 00:22:02.437331 systemd-resolved[1157]: Positive Trust Anchors: Jul 10 00:22:02.437345 systemd-resolved[1157]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 10 00:22:02.437372 systemd-resolved[1157]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 10 00:22:02.440080 systemd[1]: Started systemd-timesyncd.service. Jul 10 00:22:02.440725 systemd-timesyncd[1163]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 10 00:22:02.440777 systemd-timesyncd[1163]: Initial clock synchronization to Thu 2025-07-10 00:22:02.115321 UTC. Jul 10 00:22:02.441501 systemd[1]: Reached target time-set.target. Jul 10 00:22:02.450425 systemd-resolved[1157]: Defaulting to hostname 'linux'. Jul 10 00:22:02.451921 systemd[1]: Started systemd-resolved.service. Jul 10 00:22:02.452748 systemd[1]: Reached target network.target. Jul 10 00:22:02.453467 systemd[1]: Reached target nss-lookup.target. Jul 10 00:22:02.454272 systemd[1]: Reached target sysinit.target. Jul 10 00:22:02.455126 systemd[1]: Started motdgen.path. Jul 10 00:22:02.455839 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 10 00:22:02.457031 systemd[1]: Started logrotate.timer. Jul 10 00:22:02.457840 systemd[1]: Started mdadm.timer. Jul 10 00:22:02.458544 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 10 00:22:02.459384 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 10 00:22:02.459418 systemd[1]: Reached target paths.target. Jul 10 00:22:02.460243 systemd[1]: Reached target timers.target. Jul 10 00:22:02.461380 systemd[1]: Listening on dbus.socket. Jul 10 00:22:02.463275 systemd[1]: Starting docker.socket... Jul 10 00:22:02.466432 systemd[1]: Listening on sshd.socket. Jul 10 00:22:02.467349 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:22:02.467791 systemd[1]: Listening on docker.socket. Jul 10 00:22:02.468602 systemd[1]: Reached target sockets.target. Jul 10 00:22:02.469323 systemd[1]: Reached target basic.target. Jul 10 00:22:02.470115 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.470148 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 10 00:22:02.471140 systemd[1]: Starting containerd.service... Jul 10 00:22:02.472970 systemd[1]: Starting dbus.service... Jul 10 00:22:02.474620 systemd[1]: Starting enable-oem-cloudinit.service... Jul 10 00:22:02.476976 systemd[1]: Starting extend-filesystems.service... Jul 10 00:22:02.477983 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 10 00:22:02.479268 systemd[1]: Starting motdgen.service... Jul 10 00:22:02.483910 systemd[1]: Starting prepare-helm.service... Jul 10 00:22:02.486027 jq[1196]: false Jul 10 00:22:02.486212 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 10 00:22:02.488529 systemd[1]: Starting sshd-keygen.service... Jul 10 00:22:02.492175 systemd[1]: Starting systemd-logind.service... Jul 10 00:22:02.493035 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 10 00:22:02.493107 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 10 00:22:02.493508 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 10 00:22:02.494248 systemd[1]: Starting update-engine.service... Jul 10 00:22:02.496199 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 10 00:22:02.498579 extend-filesystems[1197]: Found loop1 Jul 10 00:22:02.498579 extend-filesystems[1197]: Found vda Jul 10 00:22:02.498579 extend-filesystems[1197]: Found vda1 Jul 10 00:22:02.498579 extend-filesystems[1197]: Found vda2 Jul 10 00:22:02.498579 extend-filesystems[1197]: Found vda3 Jul 10 00:22:02.498579 extend-filesystems[1197]: Found usr Jul 10 00:22:02.498579 extend-filesystems[1197]: Found vda4 Jul 10 00:22:02.498579 extend-filesystems[1197]: Found vda6 Jul 10 00:22:02.498579 extend-filesystems[1197]: Found vda7 Jul 10 00:22:02.511510 extend-filesystems[1197]: Found vda9 Jul 10 00:22:02.511510 extend-filesystems[1197]: Checking size of /dev/vda9 Jul 10 00:22:02.514772 jq[1213]: true Jul 10 00:22:02.500130 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 10 00:22:02.500390 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 10 00:22:02.501977 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 10 00:22:02.502166 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 10 00:22:02.515312 jq[1219]: true Jul 10 00:22:02.507164 systemd[1]: motdgen.service: Deactivated successfully. Jul 10 00:22:02.507363 systemd[1]: Finished motdgen.service. Jul 10 00:22:02.519242 extend-filesystems[1197]: Resized partition /dev/vda9 Jul 10 00:22:02.531998 tar[1216]: linux-arm64/LICENSE Jul 10 00:22:02.531998 tar[1216]: linux-arm64/helm Jul 10 00:22:02.552506 extend-filesystems[1226]: resize2fs 1.46.5 (30-Dec-2021) Jul 10 00:22:02.554947 systemd-logind[1210]: Watching system buttons on /dev/input/event0 (Power Button) Jul 10 00:22:02.562280 systemd-logind[1210]: New seat seat0. Jul 10 00:22:02.566923 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 10 00:22:02.581622 dbus-daemon[1195]: [system] SELinux support is enabled Jul 10 00:22:02.589244 dbus-daemon[1195]: [system] Successfully activated service 'org.freedesktop.systemd1' Jul 10 00:22:02.630879 update_engine[1211]: I0710 00:22:02.608320 1211 main.cc:92] Flatcar Update Engine starting Jul 10 00:22:02.630879 update_engine[1211]: I0710 00:22:02.611794 1211 update_check_scheduler.cc:74] Next update check in 10m56s Jul 10 00:22:02.581853 systemd[1]: Started dbus.service. Jul 10 00:22:02.584710 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 10 00:22:02.584735 systemd[1]: Reached target system-config.target. Jul 10 00:22:02.585652 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 10 00:22:02.585678 systemd[1]: Reached target user-config.target. Jul 10 00:22:02.589137 systemd[1]: Started systemd-logind.service. Jul 10 00:22:02.611771 systemd[1]: Started update-engine.service. Jul 10 00:22:02.614740 systemd[1]: Started locksmithd.service. Jul 10 00:22:02.643537 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 10 00:22:02.664758 extend-filesystems[1226]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 10 00:22:02.664758 extend-filesystems[1226]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 10 00:22:02.664758 extend-filesystems[1226]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 10 00:22:02.668010 env[1220]: time="2025-07-10T00:22:02.665212440Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 10 00:22:02.667960 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 10 00:22:02.668249 bash[1241]: Updated "/home/core/.ssh/authorized_keys" Jul 10 00:22:02.668311 extend-filesystems[1197]: Resized filesystem in /dev/vda9 Jul 10 00:22:02.668123 systemd[1]: Finished extend-filesystems.service. Jul 10 00:22:02.669367 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 10 00:22:02.694505 locksmithd[1247]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 10 00:22:02.701586 env[1220]: time="2025-07-10T00:22:02.701434600Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 10 00:22:02.701808 env[1220]: time="2025-07-10T00:22:02.701775160Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:22:02.703389 env[1220]: time="2025-07-10T00:22:02.703317480Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.186-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:22:02.703389 env[1220]: time="2025-07-10T00:22:02.703354720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:22:02.703764 env[1220]: time="2025-07-10T00:22:02.703737840Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:22:02.703764 env[1220]: time="2025-07-10T00:22:02.703763480Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 10 00:22:02.703868 env[1220]: time="2025-07-10T00:22:02.703778920Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 10 00:22:02.703868 env[1220]: time="2025-07-10T00:22:02.703862160Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 10 00:22:02.704062 env[1220]: time="2025-07-10T00:22:02.704010960Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:22:02.704601 env[1220]: time="2025-07-10T00:22:02.704579440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 10 00:22:02.704814 env[1220]: time="2025-07-10T00:22:02.704790560Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 10 00:22:02.704871 env[1220]: time="2025-07-10T00:22:02.704814360Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 10 00:22:02.704974 env[1220]: time="2025-07-10T00:22:02.704886880Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 10 00:22:02.705011 env[1220]: time="2025-07-10T00:22:02.704976720Z" level=info msg="metadata content store policy set" policy=shared Jul 10 00:22:02.708143 env[1220]: time="2025-07-10T00:22:02.708105840Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 10 00:22:02.708198 env[1220]: time="2025-07-10T00:22:02.708145960Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 10 00:22:02.708198 env[1220]: time="2025-07-10T00:22:02.708160840Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 10 00:22:02.708238 env[1220]: time="2025-07-10T00:22:02.708206560Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 10 00:22:02.708238 env[1220]: time="2025-07-10T00:22:02.708221880Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 10 00:22:02.708275 env[1220]: time="2025-07-10T00:22:02.708236120Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 10 00:22:02.708372 env[1220]: time="2025-07-10T00:22:02.708248880Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 10 00:22:02.708923 env[1220]: time="2025-07-10T00:22:02.708891800Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 10 00:22:02.708958 env[1220]: time="2025-07-10T00:22:02.708927400Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 10 00:22:02.708958 env[1220]: time="2025-07-10T00:22:02.708942320Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 10 00:22:02.708997 env[1220]: time="2025-07-10T00:22:02.708956160Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 10 00:22:02.708997 env[1220]: time="2025-07-10T00:22:02.708970520Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 10 00:22:02.709180 env[1220]: time="2025-07-10T00:22:02.709152920Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 10 00:22:02.709355 env[1220]: time="2025-07-10T00:22:02.709329840Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 10 00:22:02.713958 env[1220]: time="2025-07-10T00:22:02.713915400Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 10 00:22:02.714041 env[1220]: time="2025-07-10T00:22:02.713967520Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714041 env[1220]: time="2025-07-10T00:22:02.713983360Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 10 00:22:02.714180 env[1220]: time="2025-07-10T00:22:02.714162120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714238 env[1220]: time="2025-07-10T00:22:02.714186240Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714238 env[1220]: time="2025-07-10T00:22:02.714199640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714238 env[1220]: time="2025-07-10T00:22:02.714212320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714302 env[1220]: time="2025-07-10T00:22:02.714224920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714302 env[1220]: time="2025-07-10T00:22:02.714292320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714339 env[1220]: time="2025-07-10T00:22:02.714310600Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714339 env[1220]: time="2025-07-10T00:22:02.714323200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714382 env[1220]: time="2025-07-10T00:22:02.714336960Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 10 00:22:02.714607 env[1220]: time="2025-07-10T00:22:02.714582840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714648 env[1220]: time="2025-07-10T00:22:02.714609120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714648 env[1220]: time="2025-07-10T00:22:02.714624080Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.714648 env[1220]: time="2025-07-10T00:22:02.714636360Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 10 00:22:02.714720 env[1220]: time="2025-07-10T00:22:02.714651960Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 10 00:22:02.714764 env[1220]: time="2025-07-10T00:22:02.714671200Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 10 00:22:02.714794 env[1220]: time="2025-07-10T00:22:02.714771240Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 10 00:22:02.714824 env[1220]: time="2025-07-10T00:22:02.714810320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 10 00:22:02.715181 env[1220]: time="2025-07-10T00:22:02.715120920Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 10 00:22:02.718381 env[1220]: time="2025-07-10T00:22:02.715188480Z" level=info msg="Connect containerd service" Jul 10 00:22:02.718381 env[1220]: time="2025-07-10T00:22:02.715220960Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 10 00:22:02.718381 env[1220]: time="2025-07-10T00:22:02.716349360Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:22:02.718381 env[1220]: time="2025-07-10T00:22:02.716926920Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 10 00:22:02.718381 env[1220]: time="2025-07-10T00:22:02.716971680Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 10 00:22:02.718381 env[1220]: time="2025-07-10T00:22:02.717079480Z" level=info msg="containerd successfully booted in 0.072768s" Jul 10 00:22:02.717103 systemd[1]: Started containerd.service. Jul 10 00:22:02.718959 env[1220]: time="2025-07-10T00:22:02.718675120Z" level=info msg="Start subscribing containerd event" Jul 10 00:22:02.718959 env[1220]: time="2025-07-10T00:22:02.718733320Z" level=info msg="Start recovering state" Jul 10 00:22:02.718959 env[1220]: time="2025-07-10T00:22:02.718807840Z" level=info msg="Start event monitor" Jul 10 00:22:02.718959 env[1220]: time="2025-07-10T00:22:02.718830520Z" level=info msg="Start snapshots syncer" Jul 10 00:22:02.718959 env[1220]: time="2025-07-10T00:22:02.718840680Z" level=info msg="Start cni network conf syncer for default" Jul 10 00:22:02.718959 env[1220]: time="2025-07-10T00:22:02.718862000Z" level=info msg="Start streaming server" Jul 10 00:22:02.892668 systemd-networkd[1038]: eth0: Gained IPv6LL Jul 10 00:22:02.894622 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 10 00:22:02.895886 systemd[1]: Reached target network-online.target. Jul 10 00:22:02.898637 systemd[1]: Starting kubelet.service... Jul 10 00:22:02.993322 tar[1216]: linux-arm64/README.md Jul 10 00:22:02.997955 systemd[1]: Finished prepare-helm.service. Jul 10 00:22:03.548559 systemd[1]: Started kubelet.service. Jul 10 00:22:03.973772 kubelet[1264]: E0710 00:22:03.973668 1264 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:22:03.975914 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:22:03.976034 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:22:04.301653 sshd_keygen[1217]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 10 00:22:04.318290 systemd[1]: Finished sshd-keygen.service. Jul 10 00:22:04.320477 systemd[1]: Starting issuegen.service... Jul 10 00:22:04.324951 systemd[1]: issuegen.service: Deactivated successfully. Jul 10 00:22:04.325099 systemd[1]: Finished issuegen.service. Jul 10 00:22:04.327313 systemd[1]: Starting systemd-user-sessions.service... Jul 10 00:22:04.335211 systemd[1]: Finished systemd-user-sessions.service. Jul 10 00:22:04.337487 systemd[1]: Started getty@tty1.service. Jul 10 00:22:04.339410 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 10 00:22:04.340509 systemd[1]: Reached target getty.target. Jul 10 00:22:04.341332 systemd[1]: Reached target multi-user.target. Jul 10 00:22:04.343325 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 10 00:22:04.349694 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 10 00:22:04.349836 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 10 00:22:04.350872 systemd[1]: Startup finished in 603ms (kernel) + 4.653s (initrd) + 5.128s (userspace) = 10.385s. Jul 10 00:22:07.428035 systemd[1]: Created slice system-sshd.slice. Jul 10 00:22:07.429110 systemd[1]: Started sshd@0-10.0.0.18:22-10.0.0.1:49906.service. Jul 10 00:22:07.468521 sshd[1286]: Accepted publickey for core from 10.0.0.1 port 49906 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:22:07.470574 sshd[1286]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:22:07.479118 systemd-logind[1210]: New session 1 of user core. Jul 10 00:22:07.480046 systemd[1]: Created slice user-500.slice. Jul 10 00:22:07.481159 systemd[1]: Starting user-runtime-dir@500.service... Jul 10 00:22:07.489329 systemd[1]: Finished user-runtime-dir@500.service. Jul 10 00:22:07.490689 systemd[1]: Starting user@500.service... Jul 10 00:22:07.493456 (systemd)[1289]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:22:07.560998 systemd[1289]: Queued start job for default target default.target. Jul 10 00:22:07.561484 systemd[1289]: Reached target paths.target. Jul 10 00:22:07.561533 systemd[1289]: Reached target sockets.target. Jul 10 00:22:07.561544 systemd[1289]: Reached target timers.target. Jul 10 00:22:07.561554 systemd[1289]: Reached target basic.target. Jul 10 00:22:07.561597 systemd[1289]: Reached target default.target. Jul 10 00:22:07.561623 systemd[1289]: Startup finished in 62ms. Jul 10 00:22:07.561690 systemd[1]: Started user@500.service. Jul 10 00:22:07.562916 systemd[1]: Started session-1.scope. Jul 10 00:22:07.620456 systemd[1]: Started sshd@1-10.0.0.18:22-10.0.0.1:49908.service. Jul 10 00:22:07.659251 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 49908 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:22:07.660461 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:22:07.663897 systemd-logind[1210]: New session 2 of user core. Jul 10 00:22:07.665084 systemd[1]: Started session-2.scope. Jul 10 00:22:07.718408 sshd[1298]: pam_unix(sshd:session): session closed for user core Jul 10 00:22:07.722264 systemd[1]: Started sshd@2-10.0.0.18:22-10.0.0.1:49916.service. Jul 10 00:22:07.722805 systemd[1]: sshd@1-10.0.0.18:22-10.0.0.1:49908.service: Deactivated successfully. Jul 10 00:22:07.723467 systemd[1]: session-2.scope: Deactivated successfully. Jul 10 00:22:07.724054 systemd-logind[1210]: Session 2 logged out. Waiting for processes to exit. Jul 10 00:22:07.725087 systemd-logind[1210]: Removed session 2. Jul 10 00:22:07.754259 sshd[1303]: Accepted publickey for core from 10.0.0.1 port 49916 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:22:07.755836 sshd[1303]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:22:07.759400 systemd-logind[1210]: New session 3 of user core. Jul 10 00:22:07.760221 systemd[1]: Started session-3.scope. Jul 10 00:22:07.810376 sshd[1303]: pam_unix(sshd:session): session closed for user core Jul 10 00:22:07.814323 systemd[1]: sshd@2-10.0.0.18:22-10.0.0.1:49916.service: Deactivated successfully. Jul 10 00:22:07.814921 systemd[1]: session-3.scope: Deactivated successfully. Jul 10 00:22:07.816667 systemd-logind[1210]: Session 3 logged out. Waiting for processes to exit. Jul 10 00:22:07.817761 systemd[1]: Started sshd@3-10.0.0.18:22-10.0.0.1:49920.service. Jul 10 00:22:07.818387 systemd-logind[1210]: Removed session 3. Jul 10 00:22:07.851724 sshd[1310]: Accepted publickey for core from 10.0.0.1 port 49920 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:22:07.853203 sshd[1310]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:22:07.856393 systemd-logind[1210]: New session 4 of user core. Jul 10 00:22:07.857212 systemd[1]: Started session-4.scope. Jul 10 00:22:07.910055 sshd[1310]: pam_unix(sshd:session): session closed for user core Jul 10 00:22:07.913671 systemd[1]: Started sshd@4-10.0.0.18:22-10.0.0.1:49936.service. Jul 10 00:22:07.914159 systemd[1]: sshd@3-10.0.0.18:22-10.0.0.1:49920.service: Deactivated successfully. Jul 10 00:22:07.914758 systemd[1]: session-4.scope: Deactivated successfully. Jul 10 00:22:07.915278 systemd-logind[1210]: Session 4 logged out. Waiting for processes to exit. Jul 10 00:22:07.916199 systemd-logind[1210]: Removed session 4. Jul 10 00:22:07.945179 sshd[1315]: Accepted publickey for core from 10.0.0.1 port 49936 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:22:07.946697 sshd[1315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:22:07.949972 systemd-logind[1210]: New session 5 of user core. Jul 10 00:22:07.950800 systemd[1]: Started session-5.scope. Jul 10 00:22:08.012781 sudo[1319]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 10 00:22:08.013348 sudo[1319]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:22:08.026650 dbus-daemon[1195]: avc: received setenforce notice (enforcing=1) Jul 10 00:22:08.027549 sudo[1319]: pam_unix(sudo:session): session closed for user root Jul 10 00:22:08.030165 sshd[1315]: pam_unix(sshd:session): session closed for user core Jul 10 00:22:08.033367 systemd[1]: Started sshd@5-10.0.0.18:22-10.0.0.1:49938.service. Jul 10 00:22:08.036458 systemd[1]: session-5.scope: Deactivated successfully. Jul 10 00:22:08.037060 systemd-logind[1210]: Session 5 logged out. Waiting for processes to exit. Jul 10 00:22:08.037207 systemd[1]: sshd@4-10.0.0.18:22-10.0.0.1:49936.service: Deactivated successfully. Jul 10 00:22:08.038081 systemd-logind[1210]: Removed session 5. Jul 10 00:22:08.066878 sshd[1322]: Accepted publickey for core from 10.0.0.1 port 49938 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:22:08.068270 sshd[1322]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:22:08.071709 systemd-logind[1210]: New session 6 of user core. Jul 10 00:22:08.072528 systemd[1]: Started session-6.scope. Jul 10 00:22:08.125196 sudo[1327]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 10 00:22:08.125432 sudo[1327]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:22:08.128110 sudo[1327]: pam_unix(sudo:session): session closed for user root Jul 10 00:22:08.132800 sudo[1326]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 10 00:22:08.133018 sudo[1326]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:22:08.141615 systemd[1]: Stopping audit-rules.service... Jul 10 00:22:08.142000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:22:08.143142 auditctl[1330]: No rules Jul 10 00:22:08.143408 systemd[1]: audit-rules.service: Deactivated successfully. Jul 10 00:22:08.143524 kernel: kauditd_printk_skb: 162 callbacks suppressed Jul 10 00:22:08.143549 kernel: audit: type=1305 audit(1752106928.142:196): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 10 00:22:08.143581 systemd[1]: Stopped audit-rules.service. Jul 10 00:22:08.142000 audit[1330]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd42bc800 a2=420 a3=0 items=0 ppid=1 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.145079 systemd[1]: Starting audit-rules.service... Jul 10 00:22:08.147269 kernel: audit: type=1300 audit(1752106928.142:196): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd42bc800 a2=420 a3=0 items=0 ppid=1 pid=1330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.147319 kernel: audit: type=1327 audit(1752106928.142:196): proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:22:08.142000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 10 00:22:08.148098 kernel: audit: type=1131 audit(1752106928.143:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.160866 augenrules[1347]: No rules Jul 10 00:22:08.161748 systemd[1]: Finished audit-rules.service. Jul 10 00:22:08.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.162603 sudo[1326]: pam_unix(sudo:session): session closed for user root Jul 10 00:22:08.161000 audit[1326]: USER_END pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.167748 kernel: audit: type=1130 audit(1752106928.160:198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.167824 kernel: audit: type=1106 audit(1752106928.161:199): pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.167846 kernel: audit: type=1104 audit(1752106928.161:200): pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.161000 audit[1326]: CRED_DISP pid=1326 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.164689 sshd[1322]: pam_unix(sshd:session): session closed for user core Jul 10 00:22:08.168351 kernel: audit: type=1106 audit(1752106928.164:201): pid=1322 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:08.164000 audit[1322]: USER_END pid=1322 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:08.168389 systemd[1]: Started sshd@6-10.0.0.18:22-10.0.0.1:49942.service. Jul 10 00:22:08.168976 systemd[1]: sshd@5-10.0.0.18:22-10.0.0.1:49938.service: Deactivated successfully. Jul 10 00:22:08.169921 systemd[1]: session-6.scope: Deactivated successfully. Jul 10 00:22:08.170509 systemd-logind[1210]: Session 6 logged out. Waiting for processes to exit. Jul 10 00:22:08.165000 audit[1322]: CRED_DISP pid=1322 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:08.171558 systemd-logind[1210]: Removed session 6. Jul 10 00:22:08.173135 kernel: audit: type=1104 audit(1752106928.165:202): pid=1322 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:08.173177 kernel: audit: type=1130 audit(1752106928.167:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:49942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:49942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.18:22-10.0.0.1:49938 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.201000 audit[1352]: USER_ACCT pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:08.203004 sshd[1352]: Accepted publickey for core from 10.0.0.1 port 49942 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:22:08.202000 audit[1352]: CRED_ACQ pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:08.202000 audit[1352]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdcdfe40 a2=3 a3=1 items=0 ppid=1 pid=1352 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.202000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:22:08.204565 sshd[1352]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:22:08.208004 systemd-logind[1210]: New session 7 of user core. Jul 10 00:22:08.208411 systemd[1]: Started session-7.scope. Jul 10 00:22:08.210000 audit[1352]: USER_START pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:08.211000 audit[1355]: CRED_ACQ pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:08.259000 audit[1356]: USER_ACCT pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.261419 sudo[1356]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 10 00:22:08.260000 audit[1356]: CRED_REFR pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.261667 sudo[1356]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 10 00:22:08.261000 audit[1356]: USER_START pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.369927 systemd[1]: Starting docker.service... Jul 10 00:22:08.451592 env[1368]: time="2025-07-10T00:22:08.451538632Z" level=info msg="Starting up" Jul 10 00:22:08.453261 env[1368]: time="2025-07-10T00:22:08.453235093Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:22:08.453359 env[1368]: time="2025-07-10T00:22:08.453345070Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:22:08.453434 env[1368]: time="2025-07-10T00:22:08.453408949Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:22:08.453483 env[1368]: time="2025-07-10T00:22:08.453470714Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:22:08.455435 env[1368]: time="2025-07-10T00:22:08.455410080Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 10 00:22:08.455748 env[1368]: time="2025-07-10T00:22:08.455728810Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 10 00:22:08.455828 env[1368]: time="2025-07-10T00:22:08.455808552Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 10 00:22:08.455879 env[1368]: time="2025-07-10T00:22:08.455866634Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 10 00:22:08.460545 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport4029913064-merged.mount: Deactivated successfully. Jul 10 00:22:08.671106 env[1368]: time="2025-07-10T00:22:08.671015784Z" level=info msg="Loading containers: start." Jul 10 00:22:08.733000 audit[1402]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.733000 audit[1402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffdccd94e0 a2=0 a3=1 items=0 ppid=1368 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.733000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 10 00:22:08.735000 audit[1404]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.735000 audit[1404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd74a65d0 a2=0 a3=1 items=0 ppid=1368 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.735000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 10 00:22:08.737000 audit[1406]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.737000 audit[1406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff143b600 a2=0 a3=1 items=0 ppid=1368 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.737000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:22:08.740000 audit[1408]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.740000 audit[1408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffe5ffb3e0 a2=0 a3=1 items=0 ppid=1368 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.740000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:22:08.743000 audit[1410]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.743000 audit[1410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffed597700 a2=0 a3=1 items=0 ppid=1368 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.743000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 10 00:22:08.770000 audit[1415]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.770000 audit[1415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc9dfe4a0 a2=0 a3=1 items=0 ppid=1368 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.770000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 10 00:22:08.781000 audit[1417]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.781000 audit[1417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffe6e50820 a2=0 a3=1 items=0 ppid=1368 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.781000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 10 00:22:08.783000 audit[1419]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.783000 audit[1419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffd7f1e240 a2=0 a3=1 items=0 ppid=1368 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.783000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 10 00:22:08.785000 audit[1421]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.785000 audit[1421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffde9c45a0 a2=0 a3=1 items=0 ppid=1368 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.785000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:22:08.792000 audit[1425]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1425 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.792000 audit[1425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffcb918080 a2=0 a3=1 items=0 ppid=1368 pid=1425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.792000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:22:08.802000 audit[1426]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1426 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.802000 audit[1426]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe28e7b00 a2=0 a3=1 items=0 ppid=1368 pid=1426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.802000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:22:08.811541 kernel: Initializing XFRM netlink socket Jul 10 00:22:08.834743 env[1368]: time="2025-07-10T00:22:08.834697683Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 10 00:22:08.851000 audit[1434]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.851000 audit[1434]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffd5512730 a2=0 a3=1 items=0 ppid=1368 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.851000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 10 00:22:08.867000 audit[1437]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1437 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.867000 audit[1437]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe85a1d80 a2=0 a3=1 items=0 ppid=1368 pid=1437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.867000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 10 00:22:08.870000 audit[1440]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.870000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffc04a5d40 a2=0 a3=1 items=0 ppid=1368 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.870000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 10 00:22:08.871000 audit[1442]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.871000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=ffffef62fe60 a2=0 a3=1 items=0 ppid=1368 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.871000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 10 00:22:08.874000 audit[1444]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.874000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffc5e1d3e0 a2=0 a3=1 items=0 ppid=1368 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.874000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 10 00:22:08.876000 audit[1446]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.876000 audit[1446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd5bcd2b0 a2=0 a3=1 items=0 ppid=1368 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.876000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 10 00:22:08.878000 audit[1448]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.878000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff298c610 a2=0 a3=1 items=0 ppid=1368 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.878000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 10 00:22:08.887000 audit[1451]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.887000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffd05b8380 a2=0 a3=1 items=0 ppid=1368 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.887000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 10 00:22:08.889000 audit[1453]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.889000 audit[1453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffe7786020 a2=0 a3=1 items=0 ppid=1368 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.889000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 10 00:22:08.891000 audit[1455]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.891000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffc7b0b6a0 a2=0 a3=1 items=0 ppid=1368 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.891000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 10 00:22:08.893000 audit[1457]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.893000 audit[1457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff6b0b560 a2=0 a3=1 items=0 ppid=1368 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.893000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 10 00:22:08.894294 systemd-networkd[1038]: docker0: Link UP Jul 10 00:22:08.901000 audit[1461]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.901000 audit[1461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffd2dc8c50 a2=0 a3=1 items=0 ppid=1368 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.901000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:22:08.912000 audit[1462]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1462 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:08.912000 audit[1462]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe488b280 a2=0 a3=1 items=0 ppid=1368 pid=1462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:08.912000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 10 00:22:08.914296 env[1368]: time="2025-07-10T00:22:08.914250750Z" level=info msg="Loading containers: done." Jul 10 00:22:08.936965 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3482043230-merged.mount: Deactivated successfully. Jul 10 00:22:08.944393 env[1368]: time="2025-07-10T00:22:08.944348155Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 10 00:22:08.944577 env[1368]: time="2025-07-10T00:22:08.944554754Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 10 00:22:08.944692 env[1368]: time="2025-07-10T00:22:08.944665906Z" level=info msg="Daemon has completed initialization" Jul 10 00:22:08.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:08.964222 systemd[1]: Started docker.service. Jul 10 00:22:08.972645 env[1368]: time="2025-07-10T00:22:08.972452928Z" level=info msg="API listen on /run/docker.sock" Jul 10 00:22:09.781062 env[1220]: time="2025-07-10T00:22:09.781012112Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 10 00:22:10.405179 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1401982682.mount: Deactivated successfully. Jul 10 00:22:12.085560 env[1220]: time="2025-07-10T00:22:12.085497798Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:12.087256 env[1220]: time="2025-07-10T00:22:12.087215180Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:12.089823 env[1220]: time="2025-07-10T00:22:12.089787895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:12.093945 env[1220]: time="2025-07-10T00:22:12.093910070Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:12.095138 env[1220]: time="2025-07-10T00:22:12.095093581Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a\"" Jul 10 00:22:12.096286 env[1220]: time="2025-07-10T00:22:12.096263223Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 10 00:22:13.886590 env[1220]: time="2025-07-10T00:22:13.886525065Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:13.888241 env[1220]: time="2025-07-10T00:22:13.888206918Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:13.889924 env[1220]: time="2025-07-10T00:22:13.889897318Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:13.891636 env[1220]: time="2025-07-10T00:22:13.891602122Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:13.892455 env[1220]: time="2025-07-10T00:22:13.892416990Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038\"" Jul 10 00:22:13.893161 env[1220]: time="2025-07-10T00:22:13.893124696Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 10 00:22:14.051638 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 10 00:22:14.051000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:14.051812 systemd[1]: Stopped kubelet.service. Jul 10 00:22:14.053232 systemd[1]: Starting kubelet.service... Jul 10 00:22:14.054098 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 10 00:22:14.054158 kernel: audit: type=1130 audit(1752106934.051:238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:14.054181 kernel: audit: type=1131 audit(1752106934.051:239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:14.051000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:14.152415 systemd[1]: Started kubelet.service. Jul 10 00:22:14.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:14.154546 kernel: audit: type=1130 audit(1752106934.152:240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:14.194579 kubelet[1503]: E0710 00:22:14.194501 1503 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:22:14.196000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:22:14.197714 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:22:14.197836 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:22:14.200540 kernel: audit: type=1131 audit(1752106934.196:241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:22:15.697740 env[1220]: time="2025-07-10T00:22:15.697686446Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:15.699193 env[1220]: time="2025-07-10T00:22:15.699149721Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:15.701267 env[1220]: time="2025-07-10T00:22:15.701237400Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:15.703676 env[1220]: time="2025-07-10T00:22:15.703649003Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:15.704421 env[1220]: time="2025-07-10T00:22:15.704385759Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f\"" Jul 10 00:22:15.705109 env[1220]: time="2025-07-10T00:22:15.705074431Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 10 00:22:16.800309 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2763103217.mount: Deactivated successfully. Jul 10 00:22:17.414525 env[1220]: time="2025-07-10T00:22:17.414459157Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:17.418758 env[1220]: time="2025-07-10T00:22:17.418726307Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:17.420119 env[1220]: time="2025-07-10T00:22:17.420093678Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:17.421475 env[1220]: time="2025-07-10T00:22:17.421440499Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:17.422074 env[1220]: time="2025-07-10T00:22:17.422032880Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9\"" Jul 10 00:22:17.422836 env[1220]: time="2025-07-10T00:22:17.422810493Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 10 00:22:18.041718 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount570718645.mount: Deactivated successfully. Jul 10 00:22:19.074988 env[1220]: time="2025-07-10T00:22:19.074925832Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:19.076765 env[1220]: time="2025-07-10T00:22:19.076725072Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:19.078782 env[1220]: time="2025-07-10T00:22:19.078757307Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:19.081260 env[1220]: time="2025-07-10T00:22:19.081224205Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:19.082042 env[1220]: time="2025-07-10T00:22:19.082014512Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 10 00:22:19.082537 env[1220]: time="2025-07-10T00:22:19.082495512Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 10 00:22:19.519062 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount277545187.mount: Deactivated successfully. Jul 10 00:22:19.523547 env[1220]: time="2025-07-10T00:22:19.523492851Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:19.525549 env[1220]: time="2025-07-10T00:22:19.525498415Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:19.527657 env[1220]: time="2025-07-10T00:22:19.527629453Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:19.529987 env[1220]: time="2025-07-10T00:22:19.529951570Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:19.530784 env[1220]: time="2025-07-10T00:22:19.530388263Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 10 00:22:19.531864 env[1220]: time="2025-07-10T00:22:19.531837710Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 10 00:22:20.283980 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount306214210.mount: Deactivated successfully. Jul 10 00:22:23.899225 env[1220]: time="2025-07-10T00:22:23.899160935Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:23.903712 env[1220]: time="2025-07-10T00:22:23.903670367Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:23.906678 env[1220]: time="2025-07-10T00:22:23.906643815Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:23.908613 env[1220]: time="2025-07-10T00:22:23.908580788Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:23.910472 env[1220]: time="2025-07-10T00:22:23.910428612Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Jul 10 00:22:24.301613 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 10 00:22:24.301775 systemd[1]: Stopped kubelet.service. Jul 10 00:22:24.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:24.303282 systemd[1]: Starting kubelet.service... Jul 10 00:22:24.301000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:24.305656 kernel: audit: type=1130 audit(1752106944.301:242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:24.305724 kernel: audit: type=1131 audit(1752106944.301:243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:24.407224 systemd[1]: Started kubelet.service. Jul 10 00:22:24.406000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:24.409546 kernel: audit: type=1130 audit(1752106944.406:244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:24.456413 kubelet[1523]: E0710 00:22:24.456351 1523 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 10 00:22:24.457798 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 10 00:22:24.457926 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 10 00:22:24.456000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:22:24.460530 kernel: audit: type=1131 audit(1752106944.456:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 10 00:22:28.547697 systemd[1]: Stopped kubelet.service. Jul 10 00:22:28.547000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:28.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:28.550101 systemd[1]: Starting kubelet.service... Jul 10 00:22:28.551483 kernel: audit: type=1130 audit(1752106948.547:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:28.551548 kernel: audit: type=1131 audit(1752106948.547:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:28.573583 systemd[1]: Reloading. Jul 10 00:22:28.615472 /usr/lib/systemd/system-generators/torcx-generator[1570]: time="2025-07-10T00:22:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:22:28.615503 /usr/lib/systemd/system-generators/torcx-generator[1570]: time="2025-07-10T00:22:28Z" level=info msg="torcx already run" Jul 10 00:22:28.775708 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:22:28.775880 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:22:28.791153 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:22:28.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848324 kernel: audit: type=1400 audit(1752106948.843:248): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848394 kernel: audit: type=1400 audit(1752106948.843:249): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848426 kernel: audit: type=1400 audit(1752106948.843:250): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.852833 kernel: audit: type=1400 audit(1752106948.843:251): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.843000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.843000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit: BPF prog-id=40 op=LOAD Jul 10 00:22:28.845000 audit: BPF prog-id=24 op=UNLOAD Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.846000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.846000 audit: BPF prog-id=41 op=LOAD Jul 10 00:22:28.847000 audit: BPF prog-id=33 op=UNLOAD Jul 10 00:22:28.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.847000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.847000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848000 audit: BPF prog-id=42 op=LOAD Jul 10 00:22:28.848000 audit: BPF prog-id=35 op=UNLOAD Jul 10 00:22:28.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.848000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit: BPF prog-id=43 op=LOAD Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.851000 audit: BPF prog-id=44 op=LOAD Jul 10 00:22:28.851000 audit: BPF prog-id=36 op=UNLOAD Jul 10 00:22:28.851000 audit: BPF prog-id=37 op=UNLOAD Jul 10 00:22:28.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.852000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.852000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit: BPF prog-id=45 op=LOAD Jul 10 00:22:28.853000 audit: BPF prog-id=25 op=UNLOAD Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit: BPF prog-id=46 op=LOAD Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit: BPF prog-id=47 op=LOAD Jul 10 00:22:28.853000 audit: BPF prog-id=26 op=UNLOAD Jul 10 00:22:28.853000 audit: BPF prog-id=27 op=UNLOAD Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.853000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit: BPF prog-id=48 op=LOAD Jul 10 00:22:28.854000 audit: BPF prog-id=38 op=UNLOAD Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit: BPF prog-id=49 op=LOAD Jul 10 00:22:28.854000 audit: BPF prog-id=34 op=UNLOAD Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.854000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit: BPF prog-id=50 op=LOAD Jul 10 00:22:28.855000 audit: BPF prog-id=28 op=UNLOAD Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit: BPF prog-id=51 op=LOAD Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit: BPF prog-id=52 op=LOAD Jul 10 00:22:28.855000 audit: BPF prog-id=29 op=UNLOAD Jul 10 00:22:28.855000 audit: BPF prog-id=30 op=UNLOAD Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit: BPF prog-id=53 op=LOAD Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:28.855000 audit: BPF prog-id=54 op=LOAD Jul 10 00:22:28.855000 audit: BPF prog-id=31 op=UNLOAD Jul 10 00:22:28.855000 audit: BPF prog-id=32 op=UNLOAD Jul 10 00:22:28.866170 systemd[1]: Started kubelet.service. Jul 10 00:22:28.864000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:28.867458 systemd[1]: Stopping kubelet.service... Jul 10 00:22:28.867709 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:22:28.867889 systemd[1]: Stopped kubelet.service. Jul 10 00:22:28.866000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:28.869324 systemd[1]: Starting kubelet.service... Jul 10 00:22:28.972960 systemd[1]: Started kubelet.service. Jul 10 00:22:28.972000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:29.009133 kubelet[1615]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:22:29.009133 kubelet[1615]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:22:29.009133 kubelet[1615]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:22:29.009475 kubelet[1615]: I0710 00:22:29.009188 1615 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:22:29.775724 kubelet[1615]: I0710 00:22:29.775673 1615 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 10 00:22:29.775724 kubelet[1615]: I0710 00:22:29.775710 1615 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:22:29.776011 kubelet[1615]: I0710 00:22:29.775980 1615 server.go:954] "Client rotation is on, will bootstrap in background" Jul 10 00:22:29.838463 kubelet[1615]: E0710 00:22:29.838423 1615 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.18:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:22:29.839487 kubelet[1615]: I0710 00:22:29.839468 1615 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:22:29.847673 kubelet[1615]: E0710 00:22:29.847632 1615 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:22:29.847673 kubelet[1615]: I0710 00:22:29.847667 1615 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:22:29.850421 kubelet[1615]: I0710 00:22:29.850386 1615 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:22:29.851080 kubelet[1615]: I0710 00:22:29.851037 1615 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:22:29.851250 kubelet[1615]: I0710 00:22:29.851080 1615 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:22:29.851334 kubelet[1615]: I0710 00:22:29.851317 1615 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:22:29.851334 kubelet[1615]: I0710 00:22:29.851327 1615 container_manager_linux.go:304] "Creating device plugin manager" Jul 10 00:22:29.851527 kubelet[1615]: I0710 00:22:29.851502 1615 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:22:29.854046 kubelet[1615]: I0710 00:22:29.854023 1615 kubelet.go:446] "Attempting to sync node with API server" Jul 10 00:22:29.854046 kubelet[1615]: I0710 00:22:29.854047 1615 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:22:29.854124 kubelet[1615]: I0710 00:22:29.854064 1615 kubelet.go:352] "Adding apiserver pod source" Jul 10 00:22:29.854124 kubelet[1615]: I0710 00:22:29.854074 1615 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:22:29.880700 kubelet[1615]: W0710 00:22:29.880666 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 10 00:22:29.880845 kubelet[1615]: E0710 00:22:29.880825 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:22:29.883529 kubelet[1615]: I0710 00:22:29.883495 1615 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:22:29.883752 kubelet[1615]: W0710 00:22:29.883614 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 10 00:22:29.883752 kubelet[1615]: E0710 00:22:29.883721 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:22:29.884356 kubelet[1615]: I0710 00:22:29.884337 1615 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:22:29.884567 kubelet[1615]: W0710 00:22:29.884555 1615 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 10 00:22:29.885763 kubelet[1615]: I0710 00:22:29.885745 1615 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:22:29.885875 kubelet[1615]: I0710 00:22:29.885864 1615 server.go:1287] "Started kubelet" Jul 10 00:22:29.886029 kubelet[1615]: I0710 00:22:29.885981 1615 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:22:29.886870 kubelet[1615]: I0710 00:22:29.886790 1615 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:22:29.886000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:29.887034 kubelet[1615]: I0710 00:22:29.886990 1615 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:22:29.887034 kubelet[1615]: I0710 00:22:29.887026 1615 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:22:29.887110 kubelet[1615]: I0710 00:22:29.887101 1615 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:22:29.887136 kubelet[1615]: I0710 00:22:29.887119 1615 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:22:29.887404 kubelet[1615]: I0710 00:22:29.887387 1615 server.go:479] "Adding debug handlers to kubelet server" Jul 10 00:22:29.887801 kubelet[1615]: I0710 00:22:29.887773 1615 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:22:29.888747 kubelet[1615]: E0710 00:22:29.888722 1615 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:22:29.888855 kubelet[1615]: I0710 00:22:29.888844 1615 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:22:29.889014 kubelet[1615]: I0710 00:22:29.888999 1615 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:22:29.889123 kubelet[1615]: I0710 00:22:29.889111 1615 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:22:29.889294 kernel: kauditd_printk_skb: 171 callbacks suppressed Jul 10 00:22:29.889352 kernel: audit: type=1400 audit(1752106949.886:423): avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:29.889376 kernel: audit: type=1401 audit(1752106949.886:423): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:22:29.886000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:22:29.889691 kubelet[1615]: W0710 00:22:29.889649 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 10 00:22:29.889793 kubelet[1615]: E0710 00:22:29.889775 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:22:29.890302 kernel: audit: type=1300 audit(1752106949.886:423): arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b50f30 a1=400032f380 a2=4000b50f00 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.886000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b50f30 a1=400032f380 a2=4000b50f00 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.891658 kubelet[1615]: E0710 00:22:29.891624 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.18:6443: connect: connection refused" interval="200ms" Jul 10 00:22:29.892175 kubelet[1615]: I0710 00:22:29.892151 1615 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:22:29.892249 kubelet[1615]: I0710 00:22:29.892229 1615 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:22:29.893025 kubelet[1615]: E0710 00:22:29.892999 1615 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:22:29.893097 kernel: audit: type=1327 audit(1752106949.886:423): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:22:29.886000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:22:29.893170 kubelet[1615]: I0710 00:22:29.893103 1615 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:22:29.895523 kernel: audit: type=1400 audit(1752106949.886:424): avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:29.886000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:29.897293 kernel: audit: type=1401 audit(1752106949.886:424): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:22:29.886000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:22:29.898094 kubelet[1615]: E0710 00:22:29.896094 1615 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.18:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.18:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.1850bbfce4702b37 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-10 00:22:29.885831991 +0000 UTC m=+0.909128771,LastTimestamp:2025-07-10 00:22:29.885831991 +0000 UTC m=+0.909128771,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 10 00:22:29.898224 kernel: audit: type=1300 audit(1752106949.886:424): arch=c00000b7 syscall=5 success=no exit=-22 a0=40004230c0 a1=400032f398 a2=4000b50fc0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.886000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40004230c0 a1=400032f398 a2=4000b50fc0 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.900731 kernel: audit: type=1327 audit(1752106949.886:424): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:22:29.886000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:22:29.902987 kernel: audit: type=1325 audit(1752106949.889:425): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:29.889000 audit[1628]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1628 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:29.904270 kernel: audit: type=1300 audit(1752106949.889:425): arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe628b840 a2=0 a3=1 items=0 ppid=1615 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.889000 audit[1628]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe628b840 a2=0 a3=1 items=0 ppid=1615 pid=1628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.889000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:22:29.890000 audit[1629]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:29.890000 audit[1629]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff3bafed0 a2=0 a3=1 items=0 ppid=1615 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.890000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:22:29.898000 audit[1632]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:29.898000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd0c03d00 a2=0 a3=1 items=0 ppid=1615 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.898000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:22:29.903000 audit[1636]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:29.903000 audit[1636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffc13388c0 a2=0 a3=1 items=0 ppid=1615 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.903000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:22:29.911595 kubelet[1615]: I0710 00:22:29.911568 1615 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:22:29.911595 kubelet[1615]: I0710 00:22:29.911590 1615 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:22:29.911686 kubelet[1615]: I0710 00:22:29.911609 1615 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:22:29.911000 audit[1641]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:29.911000 audit[1641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=fffff090f820 a2=0 a3=1 items=0 ppid=1615 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.911000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 10 00:22:29.913048 kubelet[1615]: I0710 00:22:29.912989 1615 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:22:29.913000 audit[1643]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:29.913000 audit[1643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffd84fb060 a2=0 a3=1 items=0 ppid=1615 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.913000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 10 00:22:29.914101 kubelet[1615]: I0710 00:22:29.914076 1615 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:22:29.914101 kubelet[1615]: I0710 00:22:29.914101 1615 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 10 00:22:29.914251 kubelet[1615]: I0710 00:22:29.914230 1615 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:22:29.914251 kubelet[1615]: I0710 00:22:29.914246 1615 kubelet.go:2382] "Starting kubelet main sync loop" Jul 10 00:22:29.913000 audit[1644]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1644 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:29.913000 audit[1644]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffde7d1720 a2=0 a3=1 items=0 ppid=1615 pid=1644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.914413 kubelet[1615]: E0710 00:22:29.914285 1615 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:22:29.913000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:22:29.915210 kubelet[1615]: W0710 00:22:29.915000 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 10 00:22:29.915282 kubelet[1615]: E0710 00:22:29.915227 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:22:29.914000 audit[1645]: NETFILTER_CFG table=mangle:33 family=10 entries=1 op=nft_register_chain pid=1645 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:29.914000 audit[1645]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcb8a07f0 a2=0 a3=1 items=0 ppid=1615 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.914000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 10 00:22:29.915000 audit[1646]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:29.915000 audit[1646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe8d1a110 a2=0 a3=1 items=0 ppid=1615 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.915000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:22:29.916000 audit[1647]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:29.916000 audit[1647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffd1301b40 a2=0 a3=1 items=0 ppid=1615 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.916000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 10 00:22:29.916000 audit[1648]: NETFILTER_CFG table=filter:36 family=2 entries=1 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:29.916000 audit[1648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcdd86080 a2=0 a3=1 items=0 ppid=1615 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.916000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:22:29.917000 audit[1649]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:29.917000 audit[1649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe5c5fb30 a2=0 a3=1 items=0 ppid=1615 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.917000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 10 00:22:29.932073 kubelet[1615]: I0710 00:22:29.932046 1615 policy_none.go:49] "None policy: Start" Jul 10 00:22:29.932073 kubelet[1615]: I0710 00:22:29.932076 1615 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:22:29.932197 kubelet[1615]: I0710 00:22:29.932089 1615 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:22:29.936837 systemd[1]: Created slice kubepods.slice. Jul 10 00:22:29.941188 systemd[1]: Created slice kubepods-burstable.slice. Jul 10 00:22:29.943801 systemd[1]: Created slice kubepods-besteffort.slice. Jul 10 00:22:29.956393 kubelet[1615]: I0710 00:22:29.956360 1615 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:22:29.955000 audit[1615]: AVC avc: denied { mac_admin } for pid=1615 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:29.955000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:22:29.955000 audit[1615]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000ca5650 a1=40009d8d68 a2=4000ca5620 a3=25 items=0 ppid=1 pid=1615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:29.955000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:22:29.956677 kubelet[1615]: I0710 00:22:29.956420 1615 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:22:29.956677 kubelet[1615]: I0710 00:22:29.956545 1615 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:22:29.956677 kubelet[1615]: I0710 00:22:29.956558 1615 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:22:29.956813 kubelet[1615]: I0710 00:22:29.956789 1615 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:22:29.957560 kubelet[1615]: E0710 00:22:29.957527 1615 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:22:29.957631 kubelet[1615]: E0710 00:22:29.957578 1615 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 10 00:22:30.021831 systemd[1]: Created slice kubepods-burstable-pod8a1e485c5b74ac9ab95c62b40542e23f.slice. Jul 10 00:22:30.043928 kubelet[1615]: E0710 00:22:30.043768 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:22:30.046457 systemd[1]: Created slice kubepods-burstable-podd1af03769b64da1b1e8089a7035018fc.slice. Jul 10 00:22:30.048563 kubelet[1615]: E0710 00:22:30.048540 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:22:30.056413 systemd[1]: Created slice kubepods-burstable-pod8a75e163f27396b2168da0f88f85f8a5.slice. Jul 10 00:22:30.058179 kubelet[1615]: E0710 00:22:30.057782 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:22:30.058312 kubelet[1615]: I0710 00:22:30.058292 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:22:30.060443 kubelet[1615]: E0710 00:22:30.060410 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Jul 10 00:22:30.090220 kubelet[1615]: I0710 00:22:30.090188 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:30.090220 kubelet[1615]: I0710 00:22:30.090222 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:30.090361 kubelet[1615]: I0710 00:22:30.090242 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:30.090361 kubelet[1615]: I0710 00:22:30.090258 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:30.090361 kubelet[1615]: I0710 00:22:30.090277 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:22:30.090361 kubelet[1615]: I0710 00:22:30.090291 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:30.090361 kubelet[1615]: I0710 00:22:30.090329 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8a1e485c5b74ac9ab95c62b40542e23f-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8a1e485c5b74ac9ab95c62b40542e23f\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:30.090469 kubelet[1615]: I0710 00:22:30.090351 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8a1e485c5b74ac9ab95c62b40542e23f-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8a1e485c5b74ac9ab95c62b40542e23f\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:30.090469 kubelet[1615]: I0710 00:22:30.090367 1615 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8a1e485c5b74ac9ab95c62b40542e23f-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8a1e485c5b74ac9ab95c62b40542e23f\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:30.091990 kubelet[1615]: E0710 00:22:30.091959 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.18:6443: connect: connection refused" interval="400ms" Jul 10 00:22:30.262506 kubelet[1615]: I0710 00:22:30.262458 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:22:30.262883 kubelet[1615]: E0710 00:22:30.262853 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Jul 10 00:22:30.344627 kubelet[1615]: E0710 00:22:30.344596 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:30.345506 env[1220]: time="2025-07-10T00:22:30.345213054Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8a1e485c5b74ac9ab95c62b40542e23f,Namespace:kube-system,Attempt:0,}" Jul 10 00:22:30.349395 kubelet[1615]: E0710 00:22:30.349361 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:30.349882 env[1220]: time="2025-07-10T00:22:30.349833581Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,}" Jul 10 00:22:30.358598 kubelet[1615]: E0710 00:22:30.358442 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:30.360189 env[1220]: time="2025-07-10T00:22:30.360131827Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,}" Jul 10 00:22:30.493379 kubelet[1615]: E0710 00:22:30.493312 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.18:6443: connect: connection refused" interval="800ms" Jul 10 00:22:30.664613 kubelet[1615]: I0710 00:22:30.664254 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:22:30.664736 kubelet[1615]: E0710 00:22:30.664616 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Jul 10 00:22:30.798884 kubelet[1615]: W0710 00:22:30.798848 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 10 00:22:30.799012 kubelet[1615]: E0710 00:22:30.798891 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.18:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:22:30.814536 kubelet[1615]: W0710 00:22:30.814475 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 10 00:22:30.814615 kubelet[1615]: E0710 00:22:30.814546 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.18:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:22:31.044725 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3999219059.mount: Deactivated successfully. Jul 10 00:22:31.058079 env[1220]: time="2025-07-10T00:22:31.058023438Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.071195 env[1220]: time="2025-07-10T00:22:31.071144457Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.071984 env[1220]: time="2025-07-10T00:22:31.071950477Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.075314 env[1220]: time="2025-07-10T00:22:31.075284769Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.078299 env[1220]: time="2025-07-10T00:22:31.078258131Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.081986 env[1220]: time="2025-07-10T00:22:31.081957230Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.084153 env[1220]: time="2025-07-10T00:22:31.084121255Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.086832 env[1220]: time="2025-07-10T00:22:31.086804698Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.091323 env[1220]: time="2025-07-10T00:22:31.091295910Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.093577 env[1220]: time="2025-07-10T00:22:31.093536381Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.101197 env[1220]: time="2025-07-10T00:22:31.101150131Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.103282 env[1220]: time="2025-07-10T00:22:31.103237990Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:31.137983 env[1220]: time="2025-07-10T00:22:31.137552732Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:22:31.137983 env[1220]: time="2025-07-10T00:22:31.137614633Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:22:31.137983 env[1220]: time="2025-07-10T00:22:31.137626381Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:22:31.137983 env[1220]: time="2025-07-10T00:22:31.137842812Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cde835cde67eff01bcefba914dae89b01bef1fe355e28b45956a2a68c5f348b2 pid=1662 runtime=io.containerd.runc.v2 Jul 10 00:22:31.139419 env[1220]: time="2025-07-10T00:22:31.139283937Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:22:31.139419 env[1220]: time="2025-07-10T00:22:31.139318343Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:22:31.139419 env[1220]: time="2025-07-10T00:22:31.139334328Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:22:31.139667 env[1220]: time="2025-07-10T00:22:31.139619292Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d6310cdc6aae403dbe7b348621550494bbe97084a7c3a94398094f7bcb084a39 pid=1670 runtime=io.containerd.runc.v2 Jul 10 00:22:31.143398 env[1220]: time="2025-07-10T00:22:31.143195071Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:22:31.143398 env[1220]: time="2025-07-10T00:22:31.143235431Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:22:31.143398 env[1220]: time="2025-07-10T00:22:31.143245901Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:22:31.143568 env[1220]: time="2025-07-10T00:22:31.143412940Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d03920c72f2dc1f6cb7d40a2d7d806ad6e4c16f7081439a3022b58df16a34055 pid=1693 runtime=io.containerd.runc.v2 Jul 10 00:22:31.152367 systemd[1]: Started cri-containerd-cde835cde67eff01bcefba914dae89b01bef1fe355e28b45956a2a68c5f348b2.scope. Jul 10 00:22:31.155951 systemd[1]: Started cri-containerd-d6310cdc6aae403dbe7b348621550494bbe97084a7c3a94398094f7bcb084a39.scope. Jul 10 00:22:31.163301 systemd[1]: Started cri-containerd-d03920c72f2dc1f6cb7d40a2d7d806ad6e4c16f7081439a3022b58df16a34055.scope. Jul 10 00:22:31.183830 kubelet[1615]: W0710 00:22:31.183387 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 10 00:22:31.183830 kubelet[1615]: E0710 00:22:31.183469 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.18:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.183000 audit: BPF prog-id=55 op=LOAD Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1662 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653833356364653637656666303162636566626139313464616538 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1662 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653833356364653637656666303162636566626139313464616538 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit: BPF prog-id=56 op=LOAD Jul 10 00:22:31.184000 audit[1685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1662 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653833356364653637656666303162636566626139313464616538 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit: BPF prog-id=57 op=LOAD Jul 10 00:22:31.184000 audit[1685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1662 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653833356364653637656666303162636566626139313464616538 Jul 10 00:22:31.184000 audit: BPF prog-id=57 op=UNLOAD Jul 10 00:22:31.184000 audit: BPF prog-id=56 op=UNLOAD Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { perfmon } for pid=1685 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit[1685]: AVC avc: denied { bpf } for pid=1685 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.184000 audit: BPF prog-id=58 op=LOAD Jul 10 00:22:31.184000 audit[1685]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1662 pid=1685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.184000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364653833356364653637656666303162636566626139313464616538 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.195000 audit: BPF prog-id=59 op=LOAD Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1670 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333130636463366161653430336462653762333438363231353530 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1670 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333130636463366161653430336462653762333438363231353530 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.196000 audit: BPF prog-id=60 op=LOAD Jul 10 00:22:31.196000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1670 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.196000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333130636463366161653430336462653762333438363231353530 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit: BPF prog-id=61 op=LOAD Jul 10 00:22:31.197000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1670 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333130636463366161653430336462653762333438363231353530 Jul 10 00:22:31.197000 audit: BPF prog-id=61 op=UNLOAD Jul 10 00:22:31.197000 audit: BPF prog-id=60 op=UNLOAD Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { perfmon } for pid=1690 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit[1690]: AVC avc: denied { bpf } for pid=1690 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.197000 audit: BPF prog-id=62 op=LOAD Jul 10 00:22:31.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.198000 audit: BPF prog-id=63 op=LOAD Jul 10 00:22:31.197000 audit[1690]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1670 pid=1690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.197000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6436333130636463366161653430336462653762333438363231353530 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=1693 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430333932306337326632646331663663623764343061326437643830 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=1693 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430333932306337326632646331663663623764343061326437643830 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit: BPF prog-id=64 op=LOAD Jul 10 00:22:31.199000 audit[1713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=1693 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430333932306337326632646331663663623764343061326437643830 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit: BPF prog-id=65 op=LOAD Jul 10 00:22:31.199000 audit[1713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=1693 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430333932306337326632646331663663623764343061326437643830 Jul 10 00:22:31.199000 audit: BPF prog-id=65 op=UNLOAD Jul 10 00:22:31.199000 audit: BPF prog-id=64 op=UNLOAD Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { perfmon } for pid=1713 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit[1713]: AVC avc: denied { bpf } for pid=1713 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.199000 audit: BPF prog-id=66 op=LOAD Jul 10 00:22:31.199000 audit[1713]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=1693 pid=1713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430333932306337326632646331663663623764343061326437643830 Jul 10 00:22:31.219554 env[1220]: time="2025-07-10T00:22:31.219492453Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:8a1e485c5b74ac9ab95c62b40542e23f,Namespace:kube-system,Attempt:0,} returns sandbox id \"cde835cde67eff01bcefba914dae89b01bef1fe355e28b45956a2a68c5f348b2\"" Jul 10 00:22:31.220533 kubelet[1615]: E0710 00:22:31.220469 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:31.222221 env[1220]: time="2025-07-10T00:22:31.222102846Z" level=info msg="CreateContainer within sandbox \"cde835cde67eff01bcefba914dae89b01bef1fe355e28b45956a2a68c5f348b2\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 10 00:22:31.228986 env[1220]: time="2025-07-10T00:22:31.228938509Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"d03920c72f2dc1f6cb7d40a2d7d806ad6e4c16f7081439a3022b58df16a34055\"" Jul 10 00:22:31.230045 kubelet[1615]: E0710 00:22:31.230014 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:31.231352 env[1220]: time="2025-07-10T00:22:31.231315568Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"d6310cdc6aae403dbe7b348621550494bbe97084a7c3a94398094f7bcb084a39\"" Jul 10 00:22:31.231997 env[1220]: time="2025-07-10T00:22:31.231963980Z" level=info msg="CreateContainer within sandbox \"d03920c72f2dc1f6cb7d40a2d7d806ad6e4c16f7081439a3022b58df16a34055\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 10 00:22:31.232811 kubelet[1615]: E0710 00:22:31.232777 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:31.234578 env[1220]: time="2025-07-10T00:22:31.234541046Z" level=info msg="CreateContainer within sandbox \"d6310cdc6aae403dbe7b348621550494bbe97084a7c3a94398094f7bcb084a39\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 10 00:22:31.248186 env[1220]: time="2025-07-10T00:22:31.248129412Z" level=info msg="CreateContainer within sandbox \"cde835cde67eff01bcefba914dae89b01bef1fe355e28b45956a2a68c5f348b2\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"5c44ebf0115c451ad7c4112feb612c8269fd70493ede5d0a9a898e3b18a09651\"" Jul 10 00:22:31.249148 env[1220]: time="2025-07-10T00:22:31.249116137Z" level=info msg="StartContainer for \"5c44ebf0115c451ad7c4112feb612c8269fd70493ede5d0a9a898e3b18a09651\"" Jul 10 00:22:31.256819 env[1220]: time="2025-07-10T00:22:31.256757500Z" level=info msg="CreateContainer within sandbox \"d03920c72f2dc1f6cb7d40a2d7d806ad6e4c16f7081439a3022b58df16a34055\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"2a8dacd9e0b7383bf4c5758efdb71d8250663b857f00abc28397db8537136a91\"" Jul 10 00:22:31.257351 env[1220]: time="2025-07-10T00:22:31.257297257Z" level=info msg="StartContainer for \"2a8dacd9e0b7383bf4c5758efdb71d8250663b857f00abc28397db8537136a91\"" Jul 10 00:22:31.261369 env[1220]: time="2025-07-10T00:22:31.261316526Z" level=info msg="CreateContainer within sandbox \"d6310cdc6aae403dbe7b348621550494bbe97084a7c3a94398094f7bcb084a39\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"bb8f5710adaaa834ca02f97dd4bfb17ed9f23bece9127ac9ba38596603832fcc\"" Jul 10 00:22:31.261873 env[1220]: time="2025-07-10T00:22:31.261840339Z" level=info msg="StartContainer for \"bb8f5710adaaa834ca02f97dd4bfb17ed9f23bece9127ac9ba38596603832fcc\"" Jul 10 00:22:31.269983 systemd[1]: Started cri-containerd-5c44ebf0115c451ad7c4112feb612c8269fd70493ede5d0a9a898e3b18a09651.scope. Jul 10 00:22:31.278031 systemd[1]: Started cri-containerd-2a8dacd9e0b7383bf4c5758efdb71d8250663b857f00abc28397db8537136a91.scope. Jul 10 00:22:31.281696 systemd[1]: Started cri-containerd-bb8f5710adaaa834ca02f97dd4bfb17ed9f23bece9127ac9ba38596603832fcc.scope. Jul 10 00:22:31.294758 kubelet[1615]: E0710 00:22:31.294698 1615 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.18:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.18:6443: connect: connection refused" interval="1.6s" Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.313000 audit: BPF prog-id=67 op=LOAD Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.315000 audit: BPF prog-id=68 op=LOAD Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1693 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261386461636439653062373338336266346335373538656664623731 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1662 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343465626630313135633435316164376334313132666562363132 Jul 10 00:22:31.316000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1693 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261386461636439653062373338336266346335373538656664623731 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1662 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343465626630313135633435316164376334313132666562363132 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit: BPF prog-id=69 op=LOAD Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1662 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343465626630313135633435316164376334313132666562363132 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit: BPF prog-id=70 op=LOAD Jul 10 00:22:31.316000 audit[1786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1662 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343465626630313135633435316164376334313132666562363132 Jul 10 00:22:31.316000 audit: BPF prog-id=70 op=UNLOAD Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit: BPF prog-id=71 op=LOAD Jul 10 00:22:31.316000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1693 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261386461636439653062373338336266346335373538656664623731 Jul 10 00:22:31.316000 audit: BPF prog-id=69 op=UNLOAD Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit: BPF prog-id=72 op=LOAD Jul 10 00:22:31.316000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1693 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261386461636439653062373338336266346335373538656664623731 Jul 10 00:22:31.316000 audit: BPF prog-id=72 op=UNLOAD Jul 10 00:22:31.316000 audit: BPF prog-id=71 op=UNLOAD Jul 10 00:22:31.316000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit: BPF prog-id=73 op=LOAD Jul 10 00:22:31.316000 audit[1786]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1662 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3563343465626630313135633435316164376334313132666562363132 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.316000 audit: BPF prog-id=74 op=LOAD Jul 10 00:22:31.316000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1693 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.316000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261386461636439653062373338336266346335373538656664623731 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.318000 audit: BPF prog-id=75 op=LOAD Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=1670 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262386635373130616461616138333463613032663937646434626662 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=1670 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262386635373130616461616138333463613032663937646434626662 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit: BPF prog-id=76 op=LOAD Jul 10 00:22:31.319000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=1670 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262386635373130616461616138333463613032663937646434626662 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit: BPF prog-id=77 op=LOAD Jul 10 00:22:31.319000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=1670 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262386635373130616461616138333463613032663937646434626662 Jul 10 00:22:31.319000 audit: BPF prog-id=77 op=UNLOAD Jul 10 00:22:31.319000 audit: BPF prog-id=76 op=UNLOAD Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { perfmon } for pid=1817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit[1817]: AVC avc: denied { bpf } for pid=1817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:31.319000 audit: BPF prog-id=78 op=LOAD Jul 10 00:22:31.319000 audit[1817]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=1670 pid=1817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:31.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262386635373130616461616138333463613032663937646434626662 Jul 10 00:22:31.343968 kubelet[1615]: W0710 00:22:31.343896 1615 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.18:6443: connect: connection refused Jul 10 00:22:31.343968 kubelet[1615]: E0710 00:22:31.343972 1615 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.18:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.18:6443: connect: connection refused" logger="UnhandledError" Jul 10 00:22:31.388143 env[1220]: time="2025-07-10T00:22:31.384861732Z" level=info msg="StartContainer for \"5c44ebf0115c451ad7c4112feb612c8269fd70493ede5d0a9a898e3b18a09651\" returns successfully" Jul 10 00:22:31.388143 env[1220]: time="2025-07-10T00:22:31.384798673Z" level=info msg="StartContainer for \"2a8dacd9e0b7383bf4c5758efdb71d8250663b857f00abc28397db8537136a91\" returns successfully" Jul 10 00:22:31.409980 env[1220]: time="2025-07-10T00:22:31.408871210Z" level=info msg="StartContainer for \"bb8f5710adaaa834ca02f97dd4bfb17ed9f23bece9127ac9ba38596603832fcc\" returns successfully" Jul 10 00:22:31.467187 kubelet[1615]: I0710 00:22:31.466837 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:22:31.467321 kubelet[1615]: E0710 00:22:31.467251 1615 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.18:6443/api/v1/nodes\": dial tcp 10.0.0.18:6443: connect: connection refused" node="localhost" Jul 10 00:22:31.922245 kubelet[1615]: E0710 00:22:31.922209 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:22:31.922373 kubelet[1615]: E0710 00:22:31.922351 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:31.924245 kubelet[1615]: E0710 00:22:31.924222 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:22:31.924369 kubelet[1615]: E0710 00:22:31.924347 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:31.926387 kubelet[1615]: E0710 00:22:31.926360 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:22:31.926478 kubelet[1615]: E0710 00:22:31.926461 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:32.781000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:32.781000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4005ee53e0 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:22:32.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:22:32.781000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:32.781000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4004458740 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:22:32.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:22:32.781000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:32.781000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=4005ee5500 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:22:32.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:22:32.790000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:32.790000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=45 a1=4005ee5a40 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:22:32.790000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:22:32.791000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:32.791000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4004458b00 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:22:32.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:22:32.791000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:32.791000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=4005ee5b30 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:22:32.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:22:32.912931 kubelet[1615]: E0710 00:22:32.912894 1615 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 10 00:22:32.919000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:32.919000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40000f9180 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:22:32.919000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:22:32.920000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:32.920000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40002483f0 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:22:32.920000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:22:32.927807 kubelet[1615]: E0710 00:22:32.927781 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:22:32.927929 kubelet[1615]: E0710 00:22:32.927904 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:32.928480 kubelet[1615]: E0710 00:22:32.928308 1615 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 10 00:22:32.928480 kubelet[1615]: E0710 00:22:32.928419 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:33.069201 kubelet[1615]: I0710 00:22:33.069177 1615 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:22:33.244055 kubelet[1615]: I0710 00:22:33.244025 1615 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:22:33.289900 kubelet[1615]: I0710 00:22:33.289861 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:22:33.304730 kubelet[1615]: E0710 00:22:33.304690 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 10 00:22:33.304898 kubelet[1615]: I0710 00:22:33.304885 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:33.307225 kubelet[1615]: E0710 00:22:33.307184 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:33.307378 kubelet[1615]: I0710 00:22:33.307367 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:33.309616 kubelet[1615]: E0710 00:22:33.309586 1615 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:33.883869 kubelet[1615]: I0710 00:22:33.883832 1615 apiserver.go:52] "Watching apiserver" Jul 10 00:22:33.889355 kubelet[1615]: I0710 00:22:33.889306 1615 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:22:33.927811 kubelet[1615]: I0710 00:22:33.927784 1615 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:33.937344 kubelet[1615]: E0710 00:22:33.937309 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:34.929012 kubelet[1615]: E0710 00:22:34.928984 1615 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:34.932961 systemd[1]: Reloading. Jul 10 00:22:34.982426 /usr/lib/systemd/system-generators/torcx-generator[1915]: time="2025-07-10T00:22:34Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.7 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.7 /var/lib/torcx/store]" Jul 10 00:22:34.982458 /usr/lib/systemd/system-generators/torcx-generator[1915]: time="2025-07-10T00:22:34Z" level=info msg="torcx already run" Jul 10 00:22:35.035240 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 10 00:22:35.035261 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 10 00:22:35.050618 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 10 00:22:35.113000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115605 kernel: kauditd_printk_skb: 404 callbacks suppressed Jul 10 00:22:35.115670 kernel: audit: type=1400 audit(1752106955.113:554): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.118958 kernel: audit: type=1400 audit(1752106955.114:555): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119021 kernel: audit: type=1400 audit(1752106955.115:556): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.120627 kernel: audit: type=1400 audit(1752106955.115:557): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.122302 kernel: audit: type=1400 audit(1752106955.115:558): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.124018 kernel: audit: type=1400 audit(1752106955.115:559): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.127427 kernel: audit: type=1400 audit(1752106955.115:560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.127484 kernel: audit: type=1400 audit(1752106955.115:561): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129217 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 10 00:22:35.129315 kernel: audit: type=1400 audit(1752106955.115:562): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.115000 audit: BPF prog-id=79 op=LOAD Jul 10 00:22:35.115000 audit: BPF prog-id=63 op=UNLOAD Jul 10 00:22:35.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit: BPF prog-id=80 op=LOAD Jul 10 00:22:35.119000 audit: BPF prog-id=40 op=UNLOAD Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.120000 audit: BPF prog-id=81 op=LOAD Jul 10 00:22:35.120000 audit: BPF prog-id=67 op=UNLOAD Jul 10 00:22:35.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit: BPF prog-id=82 op=LOAD Jul 10 00:22:35.123000 audit: BPF prog-id=75 op=UNLOAD Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.124000 audit: BPF prog-id=83 op=LOAD Jul 10 00:22:35.124000 audit: BPF prog-id=41 op=UNLOAD Jul 10 00:22:35.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.125000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.125000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.126000 audit: BPF prog-id=84 op=LOAD Jul 10 00:22:35.126000 audit: BPF prog-id=42 op=UNLOAD Jul 10 00:22:35.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit: BPF prog-id=85 op=LOAD Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.129000 audit: BPF prog-id=86 op=LOAD Jul 10 00:22:35.129000 audit: BPF prog-id=43 op=UNLOAD Jul 10 00:22:35.129000 audit: BPF prog-id=44 op=UNLOAD Jul 10 00:22:35.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.130000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.130000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit: BPF prog-id=87 op=LOAD Jul 10 00:22:35.131000 audit: BPF prog-id=55 op=UNLOAD Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.131000 audit: BPF prog-id=88 op=LOAD Jul 10 00:22:35.131000 audit: BPF prog-id=68 op=UNLOAD Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit: BPF prog-id=89 op=LOAD Jul 10 00:22:35.132000 audit: BPF prog-id=45 op=UNLOAD Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit: BPF prog-id=90 op=LOAD Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.132000 audit: BPF prog-id=91 op=LOAD Jul 10 00:22:35.132000 audit: BPF prog-id=46 op=UNLOAD Jul 10 00:22:35.132000 audit: BPF prog-id=47 op=UNLOAD Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.133000 audit: BPF prog-id=92 op=LOAD Jul 10 00:22:35.133000 audit: BPF prog-id=48 op=UNLOAD Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit: BPF prog-id=93 op=LOAD Jul 10 00:22:35.134000 audit: BPF prog-id=49 op=UNLOAD Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.134000 audit: BPF prog-id=94 op=LOAD Jul 10 00:22:35.134000 audit: BPF prog-id=59 op=UNLOAD Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit: BPF prog-id=95 op=LOAD Jul 10 00:22:35.135000 audit: BPF prog-id=50 op=UNLOAD Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit: BPF prog-id=96 op=LOAD Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit: BPF prog-id=97 op=LOAD Jul 10 00:22:35.135000 audit: BPF prog-id=51 op=UNLOAD Jul 10 00:22:35.135000 audit: BPF prog-id=52 op=UNLOAD Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit: BPF prog-id=98 op=LOAD Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.135000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.136000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.136000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.136000 audit: BPF prog-id=99 op=LOAD Jul 10 00:22:35.136000 audit: BPF prog-id=53 op=UNLOAD Jul 10 00:22:35.136000 audit: BPF prog-id=54 op=UNLOAD Jul 10 00:22:35.147952 systemd[1]: Stopping kubelet.service... Jul 10 00:22:35.176829 systemd[1]: kubelet.service: Deactivated successfully. Jul 10 00:22:35.177026 systemd[1]: Stopped kubelet.service. Jul 10 00:22:35.175000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:35.177082 systemd[1]: kubelet.service: Consumed 1.258s CPU time. Jul 10 00:22:35.178731 systemd[1]: Starting kubelet.service... Jul 10 00:22:35.280317 systemd[1]: Started kubelet.service. Jul 10 00:22:35.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:35.321106 kubelet[1954]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:22:35.321478 kubelet[1954]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 10 00:22:35.321551 kubelet[1954]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 10 00:22:35.321881 kubelet[1954]: I0710 00:22:35.321830 1954 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 10 00:22:35.331999 kubelet[1954]: I0710 00:22:35.331958 1954 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 10 00:22:35.331999 kubelet[1954]: I0710 00:22:35.331988 1954 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 10 00:22:35.332259 kubelet[1954]: I0710 00:22:35.332231 1954 server.go:954] "Client rotation is on, will bootstrap in background" Jul 10 00:22:35.334064 kubelet[1954]: I0710 00:22:35.334005 1954 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 10 00:22:35.337067 kubelet[1954]: I0710 00:22:35.337033 1954 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 10 00:22:35.341009 kubelet[1954]: E0710 00:22:35.340923 1954 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 10 00:22:35.341074 kubelet[1954]: I0710 00:22:35.341012 1954 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 10 00:22:35.344319 kubelet[1954]: I0710 00:22:35.344279 1954 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 10 00:22:35.344498 kubelet[1954]: I0710 00:22:35.344471 1954 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 10 00:22:35.344761 kubelet[1954]: I0710 00:22:35.344495 1954 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 10 00:22:35.344858 kubelet[1954]: I0710 00:22:35.344770 1954 topology_manager.go:138] "Creating topology manager with none policy" Jul 10 00:22:35.344858 kubelet[1954]: I0710 00:22:35.344780 1954 container_manager_linux.go:304] "Creating device plugin manager" Jul 10 00:22:35.344858 kubelet[1954]: I0710 00:22:35.344820 1954 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:22:35.344956 kubelet[1954]: I0710 00:22:35.344940 1954 kubelet.go:446] "Attempting to sync node with API server" Jul 10 00:22:35.344987 kubelet[1954]: I0710 00:22:35.344959 1954 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 10 00:22:35.344987 kubelet[1954]: I0710 00:22:35.344978 1954 kubelet.go:352] "Adding apiserver pod source" Jul 10 00:22:35.345027 kubelet[1954]: I0710 00:22:35.344987 1954 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 10 00:22:35.346340 kubelet[1954]: I0710 00:22:35.346320 1954 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 10 00:22:35.346983 kubelet[1954]: I0710 00:22:35.346952 1954 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 10 00:22:35.347806 kubelet[1954]: I0710 00:22:35.347719 1954 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 10 00:22:35.347806 kubelet[1954]: I0710 00:22:35.347756 1954 server.go:1287] "Started kubelet" Jul 10 00:22:35.348330 kubelet[1954]: I0710 00:22:35.348274 1954 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 10 00:22:35.348472 kubelet[1954]: I0710 00:22:35.348422 1954 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 10 00:22:35.350247 kubelet[1954]: I0710 00:22:35.350210 1954 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 10 00:22:35.351134 kubelet[1954]: I0710 00:22:35.351103 1954 server.go:479] "Adding debug handlers to kubelet server" Jul 10 00:22:35.349000 audit[1954]: AVC avc: denied { mac_admin } for pid=1954 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.349000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:22:35.349000 audit[1954]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a7d650 a1=4000d669f0 a2=4000a7d620 a3=25 items=0 ppid=1 pid=1954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:35.349000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:22:35.351806 kubelet[1954]: I0710 00:22:35.351783 1954 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 10 00:22:35.350000 audit[1954]: AVC avc: denied { mac_admin } for pid=1954 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.350000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:22:35.350000 audit[1954]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b4bc40 a1=4000d66a08 a2=4000b511d0 a3=25 items=0 ppid=1 pid=1954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:35.350000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:22:35.352121 kubelet[1954]: I0710 00:22:35.352101 1954 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 10 00:22:35.352205 kubelet[1954]: I0710 00:22:35.352194 1954 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 10 00:22:35.356862 kubelet[1954]: I0710 00:22:35.354535 1954 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 10 00:22:35.356862 kubelet[1954]: E0710 00:22:35.354764 1954 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 10 00:22:35.356862 kubelet[1954]: I0710 00:22:35.354813 1954 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 10 00:22:35.356862 kubelet[1954]: I0710 00:22:35.355010 1954 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 10 00:22:35.356862 kubelet[1954]: I0710 00:22:35.355152 1954 reconciler.go:26] "Reconciler: start to sync state" Jul 10 00:22:35.356862 kubelet[1954]: I0710 00:22:35.355378 1954 factory.go:221] Registration of the systemd container factory successfully Jul 10 00:22:35.356862 kubelet[1954]: I0710 00:22:35.355466 1954 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 10 00:22:35.356862 kubelet[1954]: E0710 00:22:35.355917 1954 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 10 00:22:35.356862 kubelet[1954]: I0710 00:22:35.356648 1954 factory.go:221] Registration of the containerd container factory successfully Jul 10 00:22:35.367171 kubelet[1954]: I0710 00:22:35.367122 1954 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 10 00:22:35.368086 kubelet[1954]: I0710 00:22:35.368048 1954 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 10 00:22:35.368086 kubelet[1954]: I0710 00:22:35.368076 1954 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 10 00:22:35.368185 kubelet[1954]: I0710 00:22:35.368094 1954 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 10 00:22:35.368185 kubelet[1954]: I0710 00:22:35.368103 1954 kubelet.go:2382] "Starting kubelet main sync loop" Jul 10 00:22:35.368185 kubelet[1954]: E0710 00:22:35.368147 1954 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 10 00:22:35.409787 kubelet[1954]: I0710 00:22:35.409755 1954 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 10 00:22:35.409787 kubelet[1954]: I0710 00:22:35.409777 1954 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 10 00:22:35.409921 kubelet[1954]: I0710 00:22:35.409798 1954 state_mem.go:36] "Initialized new in-memory state store" Jul 10 00:22:35.409976 kubelet[1954]: I0710 00:22:35.409958 1954 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 10 00:22:35.410027 kubelet[1954]: I0710 00:22:35.409976 1954 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 10 00:22:35.410027 kubelet[1954]: I0710 00:22:35.409995 1954 policy_none.go:49] "None policy: Start" Jul 10 00:22:35.410027 kubelet[1954]: I0710 00:22:35.410004 1954 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 10 00:22:35.410027 kubelet[1954]: I0710 00:22:35.410013 1954 state_mem.go:35] "Initializing new in-memory state store" Jul 10 00:22:35.410112 kubelet[1954]: I0710 00:22:35.410107 1954 state_mem.go:75] "Updated machine memory state" Jul 10 00:22:35.413356 kubelet[1954]: I0710 00:22:35.413330 1954 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 10 00:22:35.411000 audit[1954]: AVC avc: denied { mac_admin } for pid=1954 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:35.411000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 10 00:22:35.411000 audit[1954]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=400108c480 a1=400027acd8 a2=400108c450 a3=25 items=0 ppid=1 pid=1954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:35.411000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 10 00:22:35.413683 kubelet[1954]: I0710 00:22:35.413485 1954 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 10 00:22:35.413683 kubelet[1954]: I0710 00:22:35.413645 1954 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 10 00:22:35.413683 kubelet[1954]: I0710 00:22:35.413657 1954 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 10 00:22:35.414510 kubelet[1954]: I0710 00:22:35.414204 1954 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 10 00:22:35.414954 kubelet[1954]: E0710 00:22:35.414926 1954 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 10 00:22:35.468990 kubelet[1954]: I0710 00:22:35.468954 1954 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:22:35.469246 kubelet[1954]: I0710 00:22:35.468983 1954 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:35.469325 kubelet[1954]: I0710 00:22:35.469102 1954 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:35.475396 kubelet[1954]: E0710 00:22:35.475354 1954 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:35.517655 kubelet[1954]: I0710 00:22:35.517627 1954 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 10 00:22:35.525327 kubelet[1954]: I0710 00:22:35.525291 1954 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 10 00:22:35.525432 kubelet[1954]: I0710 00:22:35.525377 1954 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 10 00:22:35.656573 kubelet[1954]: I0710 00:22:35.656528 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:35.656573 kubelet[1954]: I0710 00:22:35.656574 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:35.656756 kubelet[1954]: I0710 00:22:35.656609 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:35.656756 kubelet[1954]: I0710 00:22:35.656629 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/8a1e485c5b74ac9ab95c62b40542e23f-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"8a1e485c5b74ac9ab95c62b40542e23f\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:35.656756 kubelet[1954]: I0710 00:22:35.656646 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/8a1e485c5b74ac9ab95c62b40542e23f-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"8a1e485c5b74ac9ab95c62b40542e23f\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:35.656756 kubelet[1954]: I0710 00:22:35.656666 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/8a1e485c5b74ac9ab95c62b40542e23f-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"8a1e485c5b74ac9ab95c62b40542e23f\") " pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:35.656756 kubelet[1954]: I0710 00:22:35.656683 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:35.656876 kubelet[1954]: I0710 00:22:35.656713 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 10 00:22:35.656876 kubelet[1954]: I0710 00:22:35.656743 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 10 00:22:35.774406 kubelet[1954]: E0710 00:22:35.774343 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:35.775606 kubelet[1954]: E0710 00:22:35.775578 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:35.775682 kubelet[1954]: E0710 00:22:35.775610 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:36.345783 kubelet[1954]: I0710 00:22:36.345736 1954 apiserver.go:52] "Watching apiserver" Jul 10 00:22:36.355232 kubelet[1954]: I0710 00:22:36.355175 1954 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 10 00:22:36.399439 kubelet[1954]: I0710 00:22:36.399401 1954 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:36.399635 kubelet[1954]: E0710 00:22:36.399606 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:36.399635 kubelet[1954]: I0710 00:22:36.399622 1954 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 10 00:22:36.417248 kubelet[1954]: E0710 00:22:36.417213 1954 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 10 00:22:36.417611 kubelet[1954]: E0710 00:22:36.417592 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:36.429535 kubelet[1954]: E0710 00:22:36.429496 1954 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 10 00:22:36.429930 kubelet[1954]: E0710 00:22:36.429906 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:36.430358 kubelet[1954]: I0710 00:22:36.430314 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.430302717 podStartE2EDuration="1.430302717s" podCreationTimestamp="2025-07-10 00:22:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:22:36.429631482 +0000 UTC m=+1.144434962" watchObservedRunningTime="2025-07-10 00:22:36.430302717 +0000 UTC m=+1.145106157" Jul 10 00:22:36.471157 kubelet[1954]: I0710 00:22:36.471094 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.471077086 podStartE2EDuration="1.471077086s" podCreationTimestamp="2025-07-10 00:22:35 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:22:36.455274345 +0000 UTC m=+1.170077825" watchObservedRunningTime="2025-07-10 00:22:36.471077086 +0000 UTC m=+1.185880566" Jul 10 00:22:36.479958 kubelet[1954]: I0710 00:22:36.479907 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=3.479891912 podStartE2EDuration="3.479891912s" podCreationTimestamp="2025-07-10 00:22:33 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:22:36.472052012 +0000 UTC m=+1.186855492" watchObservedRunningTime="2025-07-10 00:22:36.479891912 +0000 UTC m=+1.194695392" Jul 10 00:22:37.400730 kubelet[1954]: E0710 00:22:37.400703 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:37.401048 kubelet[1954]: E0710 00:22:37.400750 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:39.065440 kubelet[1954]: E0710 00:22:39.065397 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:40.011000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:40.011000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40014dbc20 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:22:40.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:22:40.011000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:40.011000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=400147e740 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:22:40.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:22:40.011000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:40.011000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=40014dbc60 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:22:40.011000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:22:40.012000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:22:40.012000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4001613bc0 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:22:40.012000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:22:41.203362 kubelet[1954]: E0710 00:22:41.203320 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:41.406928 kubelet[1954]: E0710 00:22:41.406896 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:41.511000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:22:41.513591 kernel: kauditd_printk_skb: 262 callbacks suppressed Jul 10 00:22:41.513666 kernel: audit: type=1400 audit(1752106961.511:806): avc: denied { watch } for pid=1841 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=520997 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 10 00:22:41.511000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000b18200 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:22:41.518871 kernel: audit: type=1300 audit(1752106961.511:806): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000b18200 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:22:41.518920 kernel: audit: type=1327 audit(1752106961.511:806): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:22:41.511000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:22:41.756760 kubelet[1954]: I0710 00:22:41.756728 1954 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 10 00:22:41.757279 env[1220]: time="2025-07-10T00:22:41.757238209Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 10 00:22:41.757621 kubelet[1954]: I0710 00:22:41.757431 1954 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 10 00:22:42.433100 systemd[1]: Created slice kubepods-besteffort-podd169ffda_075d_46c1_aa8f_7aa17664188f.slice. Jul 10 00:22:42.509898 kubelet[1954]: I0710 00:22:42.509855 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/d169ffda-075d-46c1-aa8f-7aa17664188f-kube-proxy\") pod \"kube-proxy-88qhf\" (UID: \"d169ffda-075d-46c1-aa8f-7aa17664188f\") " pod="kube-system/kube-proxy-88qhf" Jul 10 00:22:42.509898 kubelet[1954]: I0710 00:22:42.509893 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/d169ffda-075d-46c1-aa8f-7aa17664188f-xtables-lock\") pod \"kube-proxy-88qhf\" (UID: \"d169ffda-075d-46c1-aa8f-7aa17664188f\") " pod="kube-system/kube-proxy-88qhf" Jul 10 00:22:42.509898 kubelet[1954]: I0710 00:22:42.509911 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/d169ffda-075d-46c1-aa8f-7aa17664188f-lib-modules\") pod \"kube-proxy-88qhf\" (UID: \"d169ffda-075d-46c1-aa8f-7aa17664188f\") " pod="kube-system/kube-proxy-88qhf" Jul 10 00:22:42.510368 kubelet[1954]: I0710 00:22:42.509930 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9dtld\" (UniqueName: \"kubernetes.io/projected/d169ffda-075d-46c1-aa8f-7aa17664188f-kube-api-access-9dtld\") pod \"kube-proxy-88qhf\" (UID: \"d169ffda-075d-46c1-aa8f-7aa17664188f\") " pod="kube-system/kube-proxy-88qhf" Jul 10 00:22:42.617327 kubelet[1954]: E0710 00:22:42.617294 1954 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Jul 10 00:22:42.617505 kubelet[1954]: E0710 00:22:42.617493 1954 projected.go:194] Error preparing data for projected volume kube-api-access-9dtld for pod kube-system/kube-proxy-88qhf: configmap "kube-root-ca.crt" not found Jul 10 00:22:42.617646 kubelet[1954]: E0710 00:22:42.617632 1954 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/d169ffda-075d-46c1-aa8f-7aa17664188f-kube-api-access-9dtld podName:d169ffda-075d-46c1-aa8f-7aa17664188f nodeName:}" failed. No retries permitted until 2025-07-10 00:22:43.117610833 +0000 UTC m=+7.832414313 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-9dtld" (UniqueName: "kubernetes.io/projected/d169ffda-075d-46c1-aa8f-7aa17664188f-kube-api-access-9dtld") pod "kube-proxy-88qhf" (UID: "d169ffda-075d-46c1-aa8f-7aa17664188f") : configmap "kube-root-ca.crt" not found Jul 10 00:22:42.896098 kubelet[1954]: I0710 00:22:42.896052 1954 status_manager.go:890] "Failed to get status for pod" podUID="17c38f5d-6e3b-44f8-abdc-bb4da21f648d" pod="tigera-operator/tigera-operator-747864d56d-w66l4" err="pods \"tigera-operator-747864d56d-w66l4\" is forbidden: User \"system:node:localhost\" cannot get resource \"pods\" in API group \"\" in the namespace \"tigera-operator\": no relationship found between node 'localhost' and this object" Jul 10 00:22:42.896715 systemd[1]: Created slice kubepods-besteffort-pod17c38f5d_6e3b_44f8_abdc_bb4da21f648d.slice. Jul 10 00:22:42.911961 kubelet[1954]: I0710 00:22:42.911923 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/17c38f5d-6e3b-44f8-abdc-bb4da21f648d-var-lib-calico\") pod \"tigera-operator-747864d56d-w66l4\" (UID: \"17c38f5d-6e3b-44f8-abdc-bb4da21f648d\") " pod="tigera-operator/tigera-operator-747864d56d-w66l4" Jul 10 00:22:42.912156 kubelet[1954]: I0710 00:22:42.912141 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6qtqc\" (UniqueName: \"kubernetes.io/projected/17c38f5d-6e3b-44f8-abdc-bb4da21f648d-kube-api-access-6qtqc\") pod \"tigera-operator-747864d56d-w66l4\" (UID: \"17c38f5d-6e3b-44f8-abdc-bb4da21f648d\") " pod="tigera-operator/tigera-operator-747864d56d-w66l4" Jul 10 00:22:43.021151 kubelet[1954]: I0710 00:22:43.021051 1954 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 10 00:22:43.201494 env[1220]: time="2025-07-10T00:22:43.201056510Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-w66l4,Uid:17c38f5d-6e3b-44f8-abdc-bb4da21f648d,Namespace:tigera-operator,Attempt:0,}" Jul 10 00:22:43.215841 env[1220]: time="2025-07-10T00:22:43.215746256Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:22:43.215841 env[1220]: time="2025-07-10T00:22:43.215792821Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:22:43.215841 env[1220]: time="2025-07-10T00:22:43.215812704Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:22:43.216016 env[1220]: time="2025-07-10T00:22:43.215951360Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c8b33823454c00da4916187d3537f65f99721f379950d45209a583014f426cba pid=2011 runtime=io.containerd.runc.v2 Jul 10 00:22:43.235559 systemd[1]: Started cri-containerd-c8b33823454c00da4916187d3537f65f99721f379950d45209a583014f426cba.scope. Jul 10 00:22:43.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267638 kernel: audit: type=1400 audit(1752106963.263:807): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267721 kernel: audit: type=1400 audit(1752106963.263:808): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267747 kernel: audit: type=1400 audit(1752106963.263:809): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269335 kernel: audit: type=1400 audit(1752106963.263:810): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.271115 kernel: audit: type=1400 audit(1752106963.263:811): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.274581 kernel: audit: type=1400 audit(1752106963.263:812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.274625 kernel: audit: type=1400 audit(1752106963.263:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.263000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.263000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit: BPF prog-id=100 op=LOAD Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2011 pid=2023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.265000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623333383233343534633030646134393136313837643335333766 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2011 pid=2023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.265000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623333383233343534633030646134393136313837643335333766 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.265000 audit: BPF prog-id=101 op=LOAD Jul 10 00:22:43.265000 audit[2023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2011 pid=2023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.265000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623333383233343534633030646134393136313837643335333766 Jul 10 00:22:43.267000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.267000 audit: BPF prog-id=102 op=LOAD Jul 10 00:22:43.267000 audit[2023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2011 pid=2023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.267000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623333383233343534633030646134393136313837643335333766 Jul 10 00:22:43.269000 audit: BPF prog-id=102 op=UNLOAD Jul 10 00:22:43.269000 audit: BPF prog-id=101 op=UNLOAD Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { perfmon } for pid=2023 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit[2023]: AVC avc: denied { bpf } for pid=2023 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.269000 audit: BPF prog-id=103 op=LOAD Jul 10 00:22:43.269000 audit[2023]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2011 pid=2023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623333383233343534633030646134393136313837643335333766 Jul 10 00:22:43.293277 env[1220]: time="2025-07-10T00:22:43.293238013Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-w66l4,Uid:17c38f5d-6e3b-44f8-abdc-bb4da21f648d,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"c8b33823454c00da4916187d3537f65f99721f379950d45209a583014f426cba\"" Jul 10 00:22:43.294753 env[1220]: time="2025-07-10T00:22:43.294724825Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 10 00:22:43.340251 kubelet[1954]: E0710 00:22:43.340135 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:43.340847 env[1220]: time="2025-07-10T00:22:43.340798175Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-88qhf,Uid:d169ffda-075d-46c1-aa8f-7aa17664188f,Namespace:kube-system,Attempt:0,}" Jul 10 00:22:43.352413 env[1220]: time="2025-07-10T00:22:43.352324153Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:22:43.352534 env[1220]: time="2025-07-10T00:22:43.352428005Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:22:43.352534 env[1220]: time="2025-07-10T00:22:43.352458489Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:22:43.352828 env[1220]: time="2025-07-10T00:22:43.352768004Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1e6e2664c385a48decf2d5f51036d608ef0511bdb3e540a9b61b59fbf51c9a2f pid=2053 runtime=io.containerd.runc.v2 Jul 10 00:22:43.362798 systemd[1]: Started cri-containerd-1e6e2664c385a48decf2d5f51036d608ef0511bdb3e540a9b61b59fbf51c9a2f.scope. Jul 10 00:22:43.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.382000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.382000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit: BPF prog-id=104 op=LOAD Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2053 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366532363634633338356134386465636632643566353130333664 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2053 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366532363634633338356134386465636632643566353130333664 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit: BPF prog-id=105 op=LOAD Jul 10 00:22:43.383000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2053 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366532363634633338356134386465636632643566353130333664 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit: BPF prog-id=106 op=LOAD Jul 10 00:22:43.383000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2053 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366532363634633338356134386465636632643566353130333664 Jul 10 00:22:43.383000 audit: BPF prog-id=106 op=UNLOAD Jul 10 00:22:43.383000 audit: BPF prog-id=105 op=UNLOAD Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { perfmon } for pid=2064 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit[2064]: AVC avc: denied { bpf } for pid=2064 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.383000 audit: BPF prog-id=107 op=LOAD Jul 10 00:22:43.383000 audit[2064]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2053 pid=2064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.383000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165366532363634633338356134386465636632643566353130333664 Jul 10 00:22:43.395212 env[1220]: time="2025-07-10T00:22:43.395127763Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-88qhf,Uid:d169ffda-075d-46c1-aa8f-7aa17664188f,Namespace:kube-system,Attempt:0,} returns sandbox id \"1e6e2664c385a48decf2d5f51036d608ef0511bdb3e540a9b61b59fbf51c9a2f\"" Jul 10 00:22:43.396224 kubelet[1954]: E0710 00:22:43.396055 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:43.399050 env[1220]: time="2025-07-10T00:22:43.399001172Z" level=info msg="CreateContainer within sandbox \"1e6e2664c385a48decf2d5f51036d608ef0511bdb3e540a9b61b59fbf51c9a2f\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 10 00:22:43.411487 env[1220]: time="2025-07-10T00:22:43.411442137Z" level=info msg="CreateContainer within sandbox \"1e6e2664c385a48decf2d5f51036d608ef0511bdb3e540a9b61b59fbf51c9a2f\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"46b4024ab2329dfa8e1cf0bf39f4ea7699a9f09165f40e11c7f4dad6e21f8dd3\"" Jul 10 00:22:43.412216 env[1220]: time="2025-07-10T00:22:43.412185863Z" level=info msg="StartContainer for \"46b4024ab2329dfa8e1cf0bf39f4ea7699a9f09165f40e11c7f4dad6e21f8dd3\"" Jul 10 00:22:43.427281 systemd[1]: Started cri-containerd-46b4024ab2329dfa8e1cf0bf39f4ea7699a9f09165f40e11c7f4dad6e21f8dd3.scope. Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2053 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436623430323461623233323964666138653163663062663339663465 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.449000 audit: BPF prog-id=108 op=LOAD Jul 10 00:22:43.449000 audit[2094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2053 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.449000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436623430323461623233323964666138653163663062663339663465 Jul 10 00:22:43.450000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.450000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.450000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.450000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.450000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.450000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.450000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.450000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.450000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.450000 audit: BPF prog-id=109 op=LOAD Jul 10 00:22:43.450000 audit[2094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2053 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.450000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436623430323461623233323964666138653163663062663339663465 Jul 10 00:22:43.451000 audit: BPF prog-id=109 op=UNLOAD Jul 10 00:22:43.451000 audit: BPF prog-id=108 op=UNLOAD Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { perfmon } for pid=2094 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit[2094]: AVC avc: denied { bpf } for pid=2094 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:43.451000 audit: BPF prog-id=110 op=LOAD Jul 10 00:22:43.451000 audit[2094]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2053 pid=2094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.451000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436623430323461623233323964666138653163663062663339663465 Jul 10 00:22:43.469378 env[1220]: time="2025-07-10T00:22:43.469338379Z" level=info msg="StartContainer for \"46b4024ab2329dfa8e1cf0bf39f4ea7699a9f09165f40e11c7f4dad6e21f8dd3\" returns successfully" Jul 10 00:22:43.649000 audit[2155]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.649000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff7b39ed0 a2=0 a3=1 items=0 ppid=2105 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.649000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:22:43.650000 audit[2154]: NETFILTER_CFG table=mangle:39 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.650000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe8bccf20 a2=0 a3=1 items=0 ppid=2105 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 10 00:22:43.652000 audit[2157]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.652000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc234cec0 a2=0 a3=1 items=0 ppid=2105 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.652000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:22:43.652000 audit[2158]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.652000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcd98cf70 a2=0 a3=1 items=0 ppid=2105 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.652000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 10 00:22:43.654000 audit[2159]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.654000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe82764a0 a2=0 a3=1 items=0 ppid=2105 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.654000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:22:43.655000 audit[2160]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.655000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd6fe8660 a2=0 a3=1 items=0 ppid=2105 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.655000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 10 00:22:43.752000 audit[2161]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.752000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffd7eb8020 a2=0 a3=1 items=0 ppid=2105 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.752000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:22:43.759000 audit[2164]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.759000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffc29beb70 a2=0 a3=1 items=0 ppid=2105 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.759000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 10 00:22:43.764000 audit[2167]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.764000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffff83a6f50 a2=0 a3=1 items=0 ppid=2105 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.764000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 10 00:22:43.765000 audit[2168]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.765000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcbf91ea0 a2=0 a3=1 items=0 ppid=2105 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.765000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:22:43.767000 audit[2170]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.767000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffc77f4730 a2=0 a3=1 items=0 ppid=2105 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:22:43.768000 audit[2171]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.768000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc4b774d0 a2=0 a3=1 items=0 ppid=2105 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.768000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:22:43.771000 audit[2173]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.771000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffff9125a50 a2=0 a3=1 items=0 ppid=2105 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:22:43.774000 audit[2176]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.774000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffd40cf400 a2=0 a3=1 items=0 ppid=2105 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.774000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 10 00:22:43.775000 audit[2177]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.775000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8ad4960 a2=0 a3=1 items=0 ppid=2105 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.775000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:22:43.777000 audit[2179]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.777000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffcb589260 a2=0 a3=1 items=0 ppid=2105 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.777000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:22:43.778000 audit[2180]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.778000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcd0a9d10 a2=0 a3=1 items=0 ppid=2105 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.778000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:22:43.781000 audit[2182]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.781000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffc768960 a2=0 a3=1 items=0 ppid=2105 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.781000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:22:43.785000 audit[2185]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.785000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc1ede6c0 a2=0 a3=1 items=0 ppid=2105 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.785000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:22:43.791000 audit[2188]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.791000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffc769d60 a2=0 a3=1 items=0 ppid=2105 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.791000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:22:43.793000 audit[2189]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.793000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffa9fd420 a2=0 a3=1 items=0 ppid=2105 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.793000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:22:43.795000 audit[2191]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.795000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffce921c30 a2=0 a3=1 items=0 ppid=2105 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.795000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:22:43.798000 audit[2194]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.798000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff89ef4a0 a2=0 a3=1 items=0 ppid=2105 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.798000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:22:43.799000 audit[2195]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.799000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6052810 a2=0 a3=1 items=0 ppid=2105 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.799000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:22:43.801000 audit[2197]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 10 00:22:43.801000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffef0cfc30 a2=0 a3=1 items=0 ppid=2105 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.801000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:22:43.822000 audit[2203]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:43.822000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc5fc6300 a2=0 a3=1 items=0 ppid=2105 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.822000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:43.831000 audit[2203]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2203 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:43.831000 audit[2203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffc5fc6300 a2=0 a3=1 items=0 ppid=2105 pid=2203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.831000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:43.833000 audit[2208]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.833000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffe12aec90 a2=0 a3=1 items=0 ppid=2105 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.833000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 10 00:22:43.835000 audit[2210]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.835000 audit[2210]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff30a0df0 a2=0 a3=1 items=0 ppid=2105 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.835000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 10 00:22:43.838000 audit[2213]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.838000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffe0e4c180 a2=0 a3=1 items=0 ppid=2105 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.838000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 10 00:22:43.839000 audit[2214]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.839000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd56c4210 a2=0 a3=1 items=0 ppid=2105 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.839000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 10 00:22:43.842000 audit[2216]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.842000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff62a95d0 a2=0 a3=1 items=0 ppid=2105 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.842000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 10 00:22:43.842000 audit[2217]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.842000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe90071f0 a2=0 a3=1 items=0 ppid=2105 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.842000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 10 00:22:43.845000 audit[2219]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.845000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffb208800 a2=0 a3=1 items=0 ppid=2105 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.845000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 10 00:22:43.848000 audit[2222]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.848000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffec969c40 a2=0 a3=1 items=0 ppid=2105 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.848000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 10 00:22:43.849000 audit[2223]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.849000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe53e8aa0 a2=0 a3=1 items=0 ppid=2105 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.849000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 10 00:22:43.851000 audit[2225]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.851000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffff0ddf60 a2=0 a3=1 items=0 ppid=2105 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.851000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 10 00:22:43.852000 audit[2226]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.852000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc3845950 a2=0 a3=1 items=0 ppid=2105 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.852000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 10 00:22:43.854000 audit[2228]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.854000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc08a7170 a2=0 a3=1 items=0 ppid=2105 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 10 00:22:43.857000 audit[2231]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.857000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffb5e3270 a2=0 a3=1 items=0 ppid=2105 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 10 00:22:43.861000 audit[2234]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.861000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd79991e0 a2=0 a3=1 items=0 ppid=2105 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.861000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 10 00:22:43.862000 audit[2235]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.862000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc9998940 a2=0 a3=1 items=0 ppid=2105 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.862000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 10 00:22:43.864000 audit[2237]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.864000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffefb016d0 a2=0 a3=1 items=0 ppid=2105 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.864000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:22:43.868000 audit[2240]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.868000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffd9b8e000 a2=0 a3=1 items=0 ppid=2105 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.868000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 10 00:22:43.869000 audit[2241]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.869000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc6bd56e0 a2=0 a3=1 items=0 ppid=2105 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.869000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 10 00:22:43.871000 audit[2243]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.871000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffcb840670 a2=0 a3=1 items=0 ppid=2105 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.871000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 10 00:22:43.872000 audit[2244]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.872000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0e56370 a2=0 a3=1 items=0 ppid=2105 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.872000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 10 00:22:43.874000 audit[2246]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.874000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffe1b58550 a2=0 a3=1 items=0 ppid=2105 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.874000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:22:43.877000 audit[2249]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 10 00:22:43.877000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffec86e4e0 a2=0 a3=1 items=0 ppid=2105 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.877000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 10 00:22:43.880000 audit[2251]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:22:43.880000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffc0d28c70 a2=0 a3=1 items=0 ppid=2105 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.880000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:43.880000 audit[2251]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2251 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 10 00:22:43.880000 audit[2251]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffc0d28c70 a2=0 a3=1 items=0 ppid=2105 pid=2251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:43.880000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:44.027587 systemd[1]: run-containerd-runc-k8s.io-c8b33823454c00da4916187d3537f65f99721f379950d45209a583014f426cba-runc.fjuyma.mount: Deactivated successfully. Jul 10 00:22:44.415468 kubelet[1954]: E0710 00:22:44.415436 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:44.444258 kubelet[1954]: I0710 00:22:44.444195 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-88qhf" podStartSLOduration=2.444176792 podStartE2EDuration="2.444176792s" podCreationTimestamp="2025-07-10 00:22:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:22:44.44396921 +0000 UTC m=+9.158772730" watchObservedRunningTime="2025-07-10 00:22:44.444176792 +0000 UTC m=+9.158980272" Jul 10 00:22:45.069894 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4151833796.mount: Deactivated successfully. Jul 10 00:22:45.416496 kubelet[1954]: E0710 00:22:45.416391 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:45.682817 env[1220]: time="2025-07-10T00:22:45.682669758Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:45.684295 env[1220]: time="2025-07-10T00:22:45.684251083Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:45.685648 env[1220]: time="2025-07-10T00:22:45.685624347Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:45.686990 env[1220]: time="2025-07-10T00:22:45.686958606Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:45.688237 env[1220]: time="2025-07-10T00:22:45.688189175Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 10 00:22:45.691396 env[1220]: time="2025-07-10T00:22:45.691362746Z" level=info msg="CreateContainer within sandbox \"c8b33823454c00da4916187d3537f65f99721f379950d45209a583014f426cba\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 10 00:22:45.703927 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4217169812.mount: Deactivated successfully. Jul 10 00:22:45.704797 env[1220]: time="2025-07-10T00:22:45.704753666Z" level=info msg="CreateContainer within sandbox \"c8b33823454c00da4916187d3537f65f99721f379950d45209a583014f426cba\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"6dc238b4006c95e2bbe7b59a07265f6cdc01d6c87eb49aa42021fc91ef3e2b74\"" Jul 10 00:22:45.705297 env[1220]: time="2025-07-10T00:22:45.705269719Z" level=info msg="StartContainer for \"6dc238b4006c95e2bbe7b59a07265f6cdc01d6c87eb49aa42021fc91ef3e2b74\"" Jul 10 00:22:45.723012 systemd[1]: Started cri-containerd-6dc238b4006c95e2bbe7b59a07265f6cdc01d6c87eb49aa42021fc91ef3e2b74.scope. Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit: BPF prog-id=111 op=LOAD Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2011 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:45.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664633233386234303036633935653262626537623539613037323635 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2011 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:45.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664633233386234303036633935653262626537623539613037323635 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.741000 audit: BPF prog-id=112 op=LOAD Jul 10 00:22:45.741000 audit[2261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2011 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:45.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664633233386234303036633935653262626537623539613037323635 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit: BPF prog-id=113 op=LOAD Jul 10 00:22:45.742000 audit[2261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2011 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:45.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664633233386234303036633935653262626537623539613037323635 Jul 10 00:22:45.742000 audit: BPF prog-id=113 op=UNLOAD Jul 10 00:22:45.742000 audit: BPF prog-id=112 op=UNLOAD Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { perfmon } for pid=2261 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit[2261]: AVC avc: denied { bpf } for pid=2261 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:45.742000 audit: BPF prog-id=114 op=LOAD Jul 10 00:22:45.742000 audit[2261]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2011 pid=2261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:45.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3664633233386234303036633935653262626537623539613037323635 Jul 10 00:22:45.754413 env[1220]: time="2025-07-10T00:22:45.754373730Z" level=info msg="StartContainer for \"6dc238b4006c95e2bbe7b59a07265f6cdc01d6c87eb49aa42021fc91ef3e2b74\" returns successfully" Jul 10 00:22:46.307467 kubelet[1954]: E0710 00:22:46.307325 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:47.967605 update_engine[1211]: I0710 00:22:47.967557 1211 update_attempter.cc:509] Updating boot flags... Jul 10 00:22:49.073844 kubelet[1954]: E0710 00:22:49.073796 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:49.086232 kubelet[1954]: I0710 00:22:49.086159 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-w66l4" podStartSLOduration=4.691653133 podStartE2EDuration="7.086141313s" podCreationTimestamp="2025-07-10 00:22:42 +0000 UTC" firstStartedPulling="2025-07-10 00:22:43.294399548 +0000 UTC m=+8.009202988" lastFinishedPulling="2025-07-10 00:22:45.688887688 +0000 UTC m=+10.403691168" observedRunningTime="2025-07-10 00:22:46.427502742 +0000 UTC m=+11.142306262" watchObservedRunningTime="2025-07-10 00:22:49.086141313 +0000 UTC m=+13.800944793" Jul 10 00:22:51.116888 sudo[1356]: pam_unix(sudo:session): session closed for user root Jul 10 00:22:51.115000 audit[1356]: USER_END pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:51.119614 kernel: kauditd_printk_skb: 360 callbacks suppressed Jul 10 00:22:51.119718 kernel: audit: type=1106 audit(1752106971.115:918): pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:51.116000 audit[1356]: CRED_DISP pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:51.122393 kernel: audit: type=1104 audit(1752106971.116:919): pid=1356 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 10 00:22:51.124474 sshd[1352]: pam_unix(sshd:session): session closed for user core Jul 10 00:22:51.123000 audit[1352]: USER_END pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:51.127019 systemd[1]: sshd@6-10.0.0.18:22-10.0.0.1:49942.service: Deactivated successfully. Jul 10 00:22:51.127749 systemd[1]: session-7.scope: Deactivated successfully. Jul 10 00:22:51.127900 systemd[1]: session-7.scope: Consumed 6.451s CPU time. Jul 10 00:22:51.129168 systemd-logind[1210]: Session 7 logged out. Waiting for processes to exit. Jul 10 00:22:51.133829 systemd-logind[1210]: Removed session 7. Jul 10 00:22:51.123000 audit[1352]: CRED_DISP pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:51.138535 kernel: audit: type=1106 audit(1752106971.123:920): pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:51.138646 kernel: audit: type=1104 audit(1752106971.123:921): pid=1352 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:22:51.138678 kernel: audit: type=1131 audit(1752106971.126:922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:49942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:51.126000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.18:22-10.0.0.1:49942 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:22:52.663000 audit[2360]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:52.666564 kernel: audit: type=1325 audit(1752106972.663:923): table=filter:89 family=2 entries=14 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:52.666697 kernel: audit: type=1300 audit(1752106972.663:923): arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffeac360a0 a2=0 a3=1 items=0 ppid=2105 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:52.663000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffeac360a0 a2=0 a3=1 items=0 ppid=2105 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:52.663000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:52.671539 kernel: audit: type=1327 audit(1752106972.663:923): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:52.672000 audit[2360]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:52.675530 kernel: audit: type=1325 audit(1752106972.672:924): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:52.672000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeac360a0 a2=0 a3=1 items=0 ppid=2105 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:52.672000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:52.681537 kernel: audit: type=1300 audit(1752106972.672:924): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffeac360a0 a2=0 a3=1 items=0 ppid=2105 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:52.703000 audit[2362]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:52.703000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffc4a20390 a2=0 a3=1 items=0 ppid=2105 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:52.703000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:52.708000 audit[2362]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:52.708000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc4a20390 a2=0 a3=1 items=0 ppid=2105 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:52.708000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:56.626000 audit[2367]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:56.627584 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 10 00:22:56.627647 kernel: audit: type=1325 audit(1752106976.626:927): table=filter:93 family=2 entries=17 op=nft_register_rule pid=2367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:56.626000 audit[2367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd2225d70 a2=0 a3=1 items=0 ppid=2105 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:56.632174 kernel: audit: type=1300 audit(1752106976.626:927): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd2225d70 a2=0 a3=1 items=0 ppid=2105 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:56.626000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:56.633688 kernel: audit: type=1327 audit(1752106976.626:927): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:56.638000 audit[2367]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:56.638000 audit[2367]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd2225d70 a2=0 a3=1 items=0 ppid=2105 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:56.644364 kernel: audit: type=1325 audit(1752106976.638:928): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2367 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:56.644446 kernel: audit: type=1300 audit(1752106976.638:928): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd2225d70 a2=0 a3=1 items=0 ppid=2105 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:56.638000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:56.647531 kernel: audit: type=1327 audit(1752106976.638:928): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:56.673000 audit[2369]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:56.673000 audit[2369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdcde4b60 a2=0 a3=1 items=0 ppid=2105 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:56.678414 kernel: audit: type=1325 audit(1752106976.673:929): table=filter:95 family=2 entries=18 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:56.678505 kernel: audit: type=1300 audit(1752106976.673:929): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffdcde4b60 a2=0 a3=1 items=0 ppid=2105 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:56.678540 kernel: audit: type=1327 audit(1752106976.673:929): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:56.673000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:56.685000 audit[2369]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:56.685000 audit[2369]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffdcde4b60 a2=0 a3=1 items=0 ppid=2105 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:56.685000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:56.688537 kernel: audit: type=1325 audit(1752106976.685:930): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:56.707232 systemd[1]: Created slice kubepods-besteffort-pod95d12b74_11c2_4948_b3e6_4b2215f9f41b.slice. Jul 10 00:22:56.810280 kubelet[1954]: I0710 00:22:56.810226 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/95d12b74-11c2-4948-b3e6-4b2215f9f41b-tigera-ca-bundle\") pod \"calico-typha-7f45db7db6-mvb66\" (UID: \"95d12b74-11c2-4948-b3e6-4b2215f9f41b\") " pod="calico-system/calico-typha-7f45db7db6-mvb66" Jul 10 00:22:56.810646 kubelet[1954]: I0710 00:22:56.810294 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/95d12b74-11c2-4948-b3e6-4b2215f9f41b-typha-certs\") pod \"calico-typha-7f45db7db6-mvb66\" (UID: \"95d12b74-11c2-4948-b3e6-4b2215f9f41b\") " pod="calico-system/calico-typha-7f45db7db6-mvb66" Jul 10 00:22:56.810646 kubelet[1954]: I0710 00:22:56.810368 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xdbhf\" (UniqueName: \"kubernetes.io/projected/95d12b74-11c2-4948-b3e6-4b2215f9f41b-kube-api-access-xdbhf\") pod \"calico-typha-7f45db7db6-mvb66\" (UID: \"95d12b74-11c2-4948-b3e6-4b2215f9f41b\") " pod="calico-system/calico-typha-7f45db7db6-mvb66" Jul 10 00:22:57.010054 kubelet[1954]: E0710 00:22:57.009899 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:57.010538 env[1220]: time="2025-07-10T00:22:57.010477516Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7f45db7db6-mvb66,Uid:95d12b74-11c2-4948-b3e6-4b2215f9f41b,Namespace:calico-system,Attempt:0,}" Jul 10 00:22:57.032782 kubelet[1954]: W0710 00:22:57.032737 1954 reflector.go:569] object-"calico-system"/"cni-config": failed to list *v1.ConfigMap: configmaps "cni-config" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 10 00:22:57.032782 kubelet[1954]: E0710 00:22:57.032779 1954 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"cni-config\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"cni-config\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 10 00:22:57.032927 kubelet[1954]: I0710 00:22:57.032866 1954 status_manager.go:890] "Failed to get status for pod" podUID="6300516d-6953-4519-abcb-3e2d40649a05" pod="calico-system/calico-node-lmn8n" err="pods \"calico-node-lmn8n\" is forbidden: User \"system:node:localhost\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" Jul 10 00:22:57.034502 kubelet[1954]: W0710 00:22:57.034469 1954 reflector.go:569] object-"calico-system"/"node-certs": failed to list *v1.Secret: secrets "node-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 10 00:22:57.034605 kubelet[1954]: E0710 00:22:57.034505 1954 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"node-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"node-certs\" is forbidden: User \"system:node:localhost\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 10 00:22:57.036344 systemd[1]: Created slice kubepods-besteffort-pod6300516d_6953_4519_abcb_3e2d40649a05.slice. Jul 10 00:22:57.049964 env[1220]: time="2025-07-10T00:22:57.049876201Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:22:57.050092 env[1220]: time="2025-07-10T00:22:57.049988048Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:22:57.050092 env[1220]: time="2025-07-10T00:22:57.050014849Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:22:57.050238 env[1220]: time="2025-07-10T00:22:57.050191820Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4afb5d9883cbdf3a5fcd3b66390ff7385795cd52d70e4a6b0221a943cfbdbf46 pid=2379 runtime=io.containerd.runc.v2 Jul 10 00:22:57.066026 systemd[1]: Started cri-containerd-4afb5d9883cbdf3a5fcd3b66390ff7385795cd52d70e4a6b0221a943cfbdbf46.scope. Jul 10 00:22:57.111786 kubelet[1954]: I0710 00:22:57.111736 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6300516d-6953-4519-abcb-3e2d40649a05-tigera-ca-bundle\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.111786 kubelet[1954]: I0710 00:22:57.111785 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m5gfm\" (UniqueName: \"kubernetes.io/projected/6300516d-6953-4519-abcb-3e2d40649a05-kube-api-access-m5gfm\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112082 kubelet[1954]: I0710 00:22:57.111806 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/6300516d-6953-4519-abcb-3e2d40649a05-node-certs\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112082 kubelet[1954]: I0710 00:22:57.111821 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/6300516d-6953-4519-abcb-3e2d40649a05-cni-log-dir\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112082 kubelet[1954]: I0710 00:22:57.111836 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/6300516d-6953-4519-abcb-3e2d40649a05-policysync\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112082 kubelet[1954]: I0710 00:22:57.111850 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/6300516d-6953-4519-abcb-3e2d40649a05-cni-net-dir\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112082 kubelet[1954]: I0710 00:22:57.111865 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/6300516d-6953-4519-abcb-3e2d40649a05-var-lib-calico\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112214 kubelet[1954]: I0710 00:22:57.111882 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/6300516d-6953-4519-abcb-3e2d40649a05-xtables-lock\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112214 kubelet[1954]: I0710 00:22:57.111898 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/6300516d-6953-4519-abcb-3e2d40649a05-cni-bin-dir\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112214 kubelet[1954]: I0710 00:22:57.111912 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/6300516d-6953-4519-abcb-3e2d40649a05-var-run-calico\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112214 kubelet[1954]: I0710 00:22:57.111931 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/6300516d-6953-4519-abcb-3e2d40649a05-lib-modules\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.112214 kubelet[1954]: I0710 00:22:57.111961 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/6300516d-6953-4519-abcb-3e2d40649a05-flexvol-driver-host\") pod \"calico-node-lmn8n\" (UID: \"6300516d-6953-4519-abcb-3e2d40649a05\") " pod="calico-system/calico-node-lmn8n" Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.114000 audit: BPF prog-id=115 op=LOAD Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2379 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:57.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461666235643938383363626466336135666364336236363339306666 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2379 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:57.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461666235643938383363626466336135666364336236363339306666 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.115000 audit: BPF prog-id=116 op=LOAD Jul 10 00:22:57.115000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2379 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:57.115000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461666235643938383363626466336135666364336236363339306666 Jul 10 00:22:57.116000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.116000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.116000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.116000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.116000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.116000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.116000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.116000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.116000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.116000 audit: BPF prog-id=117 op=LOAD Jul 10 00:22:57.116000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2379 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:57.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461666235643938383363626466336135666364336236363339306666 Jul 10 00:22:57.116000 audit: BPF prog-id=117 op=UNLOAD Jul 10 00:22:57.117000 audit: BPF prog-id=116 op=UNLOAD Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { perfmon } for pid=2388 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit[2388]: AVC avc: denied { bpf } for pid=2388 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:57.117000 audit: BPF prog-id=118 op=LOAD Jul 10 00:22:57.117000 audit[2388]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2379 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:57.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461666235643938383363626466336135666364336236363339306666 Jul 10 00:22:57.135488 env[1220]: time="2025-07-10T00:22:57.135403807Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-7f45db7db6-mvb66,Uid:95d12b74-11c2-4948-b3e6-4b2215f9f41b,Namespace:calico-system,Attempt:0,} returns sandbox id \"4afb5d9883cbdf3a5fcd3b66390ff7385795cd52d70e4a6b0221a943cfbdbf46\"" Jul 10 00:22:57.137091 kubelet[1954]: E0710 00:22:57.137053 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:57.139012 env[1220]: time="2025-07-10T00:22:57.138969818Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 10 00:22:57.214209 kubelet[1954]: E0710 00:22:57.214150 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.214209 kubelet[1954]: W0710 00:22:57.214183 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.214790 kubelet[1954]: E0710 00:22:57.214756 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.228399 kubelet[1954]: E0710 00:22:57.227903 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.228399 kubelet[1954]: W0710 00:22:57.227927 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.228399 kubelet[1954]: E0710 00:22:57.227963 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.264578 kubelet[1954]: E0710 00:22:57.264413 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-h85xd" podUID="a340f1a4-77e3-476c-904c-86c322c2b72e" Jul 10 00:22:57.299751 kubelet[1954]: E0710 00:22:57.299708 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.299751 kubelet[1954]: W0710 00:22:57.299732 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.299751 kubelet[1954]: E0710 00:22:57.299754 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.299964 kubelet[1954]: E0710 00:22:57.299909 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.299964 kubelet[1954]: W0710 00:22:57.299918 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.299964 kubelet[1954]: E0710 00:22:57.299963 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.300150 kubelet[1954]: E0710 00:22:57.300132 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.300150 kubelet[1954]: W0710 00:22:57.300142 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.300150 kubelet[1954]: E0710 00:22:57.300151 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.300321 kubelet[1954]: E0710 00:22:57.300293 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.300321 kubelet[1954]: W0710 00:22:57.300304 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.300321 kubelet[1954]: E0710 00:22:57.300312 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.300468 kubelet[1954]: E0710 00:22:57.300452 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.300468 kubelet[1954]: W0710 00:22:57.300462 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.300539 kubelet[1954]: E0710 00:22:57.300470 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.300630 kubelet[1954]: E0710 00:22:57.300612 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.300630 kubelet[1954]: W0710 00:22:57.300623 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.300630 kubelet[1954]: E0710 00:22:57.300631 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.300780 kubelet[1954]: E0710 00:22:57.300764 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.300780 kubelet[1954]: W0710 00:22:57.300775 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.300831 kubelet[1954]: E0710 00:22:57.300783 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.300917 kubelet[1954]: E0710 00:22:57.300908 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.300950 kubelet[1954]: W0710 00:22:57.300917 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.300950 kubelet[1954]: E0710 00:22:57.300924 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.301082 kubelet[1954]: E0710 00:22:57.301072 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.301112 kubelet[1954]: W0710 00:22:57.301082 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.301112 kubelet[1954]: E0710 00:22:57.301091 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.301237 kubelet[1954]: E0710 00:22:57.301225 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.301263 kubelet[1954]: W0710 00:22:57.301237 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.301263 kubelet[1954]: E0710 00:22:57.301246 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.301384 kubelet[1954]: E0710 00:22:57.301371 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.301384 kubelet[1954]: W0710 00:22:57.301383 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.301441 kubelet[1954]: E0710 00:22:57.301392 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.301553 kubelet[1954]: E0710 00:22:57.301538 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.301553 kubelet[1954]: W0710 00:22:57.301549 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.301673 kubelet[1954]: E0710 00:22:57.301557 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.301713 kubelet[1954]: E0710 00:22:57.301699 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.301713 kubelet[1954]: W0710 00:22:57.301710 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.301761 kubelet[1954]: E0710 00:22:57.301718 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.301854 kubelet[1954]: E0710 00:22:57.301844 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.301881 kubelet[1954]: W0710 00:22:57.301854 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.301881 kubelet[1954]: E0710 00:22:57.301861 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.302059 kubelet[1954]: E0710 00:22:57.302036 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.302059 kubelet[1954]: W0710 00:22:57.302050 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.302059 kubelet[1954]: E0710 00:22:57.302058 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.302239 kubelet[1954]: E0710 00:22:57.302225 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.302263 kubelet[1954]: W0710 00:22:57.302238 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.302263 kubelet[1954]: E0710 00:22:57.302248 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.302460 kubelet[1954]: E0710 00:22:57.302446 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.302460 kubelet[1954]: W0710 00:22:57.302458 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.302545 kubelet[1954]: E0710 00:22:57.302466 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.302637 kubelet[1954]: E0710 00:22:57.302624 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.302637 kubelet[1954]: W0710 00:22:57.302635 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.302689 kubelet[1954]: E0710 00:22:57.302644 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.302777 kubelet[1954]: E0710 00:22:57.302765 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.302777 kubelet[1954]: W0710 00:22:57.302774 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.302836 kubelet[1954]: E0710 00:22:57.302781 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.302916 kubelet[1954]: E0710 00:22:57.302905 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.302916 kubelet[1954]: W0710 00:22:57.302915 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.302982 kubelet[1954]: E0710 00:22:57.302922 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.314149 kubelet[1954]: E0710 00:22:57.314107 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.314149 kubelet[1954]: W0710 00:22:57.314132 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.314149 kubelet[1954]: E0710 00:22:57.314152 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.314328 kubelet[1954]: I0710 00:22:57.314180 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/a340f1a4-77e3-476c-904c-86c322c2b72e-kubelet-dir\") pod \"csi-node-driver-h85xd\" (UID: \"a340f1a4-77e3-476c-904c-86c322c2b72e\") " pod="calico-system/csi-node-driver-h85xd" Jul 10 00:22:57.314414 kubelet[1954]: E0710 00:22:57.314355 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.314414 kubelet[1954]: W0710 00:22:57.314377 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.314414 kubelet[1954]: E0710 00:22:57.314392 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.314414 kubelet[1954]: I0710 00:22:57.314412 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/a340f1a4-77e3-476c-904c-86c322c2b72e-varrun\") pod \"csi-node-driver-h85xd\" (UID: \"a340f1a4-77e3-476c-904c-86c322c2b72e\") " pod="calico-system/csi-node-driver-h85xd" Jul 10 00:22:57.314617 kubelet[1954]: E0710 00:22:57.314588 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.314617 kubelet[1954]: W0710 00:22:57.314605 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.314701 kubelet[1954]: E0710 00:22:57.314625 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.314701 kubelet[1954]: I0710 00:22:57.314641 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/a340f1a4-77e3-476c-904c-86c322c2b72e-registration-dir\") pod \"csi-node-driver-h85xd\" (UID: \"a340f1a4-77e3-476c-904c-86c322c2b72e\") " pod="calico-system/csi-node-driver-h85xd" Jul 10 00:22:57.314817 kubelet[1954]: E0710 00:22:57.314792 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.314817 kubelet[1954]: W0710 00:22:57.314807 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.314817 kubelet[1954]: E0710 00:22:57.314816 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.314903 kubelet[1954]: I0710 00:22:57.314834 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/a340f1a4-77e3-476c-904c-86c322c2b72e-socket-dir\") pod \"csi-node-driver-h85xd\" (UID: \"a340f1a4-77e3-476c-904c-86c322c2b72e\") " pod="calico-system/csi-node-driver-h85xd" Jul 10 00:22:57.315006 kubelet[1954]: E0710 00:22:57.314984 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.315006 kubelet[1954]: W0710 00:22:57.314999 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.315065 kubelet[1954]: E0710 00:22:57.315008 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.315065 kubelet[1954]: I0710 00:22:57.315026 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h75g2\" (UniqueName: \"kubernetes.io/projected/a340f1a4-77e3-476c-904c-86c322c2b72e-kube-api-access-h75g2\") pod \"csi-node-driver-h85xd\" (UID: \"a340f1a4-77e3-476c-904c-86c322c2b72e\") " pod="calico-system/csi-node-driver-h85xd" Jul 10 00:22:57.315203 kubelet[1954]: E0710 00:22:57.315182 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.315203 kubelet[1954]: W0710 00:22:57.315196 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.315252 kubelet[1954]: E0710 00:22:57.315209 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.315356 kubelet[1954]: E0710 00:22:57.315337 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.315356 kubelet[1954]: W0710 00:22:57.315352 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.315437 kubelet[1954]: E0710 00:22:57.315423 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.315523 kubelet[1954]: E0710 00:22:57.315497 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.315523 kubelet[1954]: W0710 00:22:57.315507 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.315594 kubelet[1954]: E0710 00:22:57.315565 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.315695 kubelet[1954]: E0710 00:22:57.315681 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.315695 kubelet[1954]: W0710 00:22:57.315693 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.315756 kubelet[1954]: E0710 00:22:57.315708 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.315869 kubelet[1954]: E0710 00:22:57.315851 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.315869 kubelet[1954]: W0710 00:22:57.315860 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.315925 kubelet[1954]: E0710 00:22:57.315871 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.316038 kubelet[1954]: E0710 00:22:57.316000 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.316038 kubelet[1954]: W0710 00:22:57.316007 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.316038 kubelet[1954]: E0710 00:22:57.316019 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.316252 kubelet[1954]: E0710 00:22:57.316240 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.316297 kubelet[1954]: W0710 00:22:57.316263 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.316297 kubelet[1954]: E0710 00:22:57.316285 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.316506 kubelet[1954]: E0710 00:22:57.316494 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.316506 kubelet[1954]: W0710 00:22:57.316505 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.316599 kubelet[1954]: E0710 00:22:57.316524 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.316672 kubelet[1954]: E0710 00:22:57.316660 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.316672 kubelet[1954]: W0710 00:22:57.316671 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.316770 kubelet[1954]: E0710 00:22:57.316679 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.316825 kubelet[1954]: E0710 00:22:57.316813 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.316825 kubelet[1954]: W0710 00:22:57.316822 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.316876 kubelet[1954]: E0710 00:22:57.316831 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.416390 kubelet[1954]: E0710 00:22:57.416358 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.416390 kubelet[1954]: W0710 00:22:57.416384 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.416652 kubelet[1954]: E0710 00:22:57.416405 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.416652 kubelet[1954]: E0710 00:22:57.416630 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.416652 kubelet[1954]: W0710 00:22:57.416640 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.416730 kubelet[1954]: E0710 00:22:57.416657 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.416884 kubelet[1954]: E0710 00:22:57.416872 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.416884 kubelet[1954]: W0710 00:22:57.416884 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.416957 kubelet[1954]: E0710 00:22:57.416898 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.417103 kubelet[1954]: E0710 00:22:57.417091 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.417103 kubelet[1954]: W0710 00:22:57.417104 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.417166 kubelet[1954]: E0710 00:22:57.417118 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.417301 kubelet[1954]: E0710 00:22:57.417290 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.417337 kubelet[1954]: W0710 00:22:57.417301 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.417337 kubelet[1954]: E0710 00:22:57.417314 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.417536 kubelet[1954]: E0710 00:22:57.417511 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.417536 kubelet[1954]: W0710 00:22:57.417534 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.417605 kubelet[1954]: E0710 00:22:57.417549 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.417709 kubelet[1954]: E0710 00:22:57.417697 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.417709 kubelet[1954]: W0710 00:22:57.417706 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.417769 kubelet[1954]: E0710 00:22:57.417752 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.417855 kubelet[1954]: E0710 00:22:57.417843 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.417855 kubelet[1954]: W0710 00:22:57.417852 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.417915 kubelet[1954]: E0710 00:22:57.417890 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.418004 kubelet[1954]: E0710 00:22:57.417993 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.418004 kubelet[1954]: W0710 00:22:57.418002 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.418066 kubelet[1954]: E0710 00:22:57.418040 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.418139 kubelet[1954]: E0710 00:22:57.418127 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.418179 kubelet[1954]: W0710 00:22:57.418141 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.418179 kubelet[1954]: E0710 00:22:57.418154 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.418303 kubelet[1954]: E0710 00:22:57.418293 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.418303 kubelet[1954]: W0710 00:22:57.418303 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.418367 kubelet[1954]: E0710 00:22:57.418340 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.418445 kubelet[1954]: E0710 00:22:57.418434 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.418480 kubelet[1954]: W0710 00:22:57.418448 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.418512 kubelet[1954]: E0710 00:22:57.418487 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.418599 kubelet[1954]: E0710 00:22:57.418587 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.418599 kubelet[1954]: W0710 00:22:57.418597 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.418660 kubelet[1954]: E0710 00:22:57.418613 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.418832 kubelet[1954]: E0710 00:22:57.418822 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.418832 kubelet[1954]: W0710 00:22:57.418831 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.418908 kubelet[1954]: E0710 00:22:57.418844 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.419002 kubelet[1954]: E0710 00:22:57.418989 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.419002 kubelet[1954]: W0710 00:22:57.418999 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.419065 kubelet[1954]: E0710 00:22:57.419011 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.419164 kubelet[1954]: E0710 00:22:57.419152 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.419164 kubelet[1954]: W0710 00:22:57.419162 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.419221 kubelet[1954]: E0710 00:22:57.419200 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.419307 kubelet[1954]: E0710 00:22:57.419296 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.419307 kubelet[1954]: W0710 00:22:57.419305 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.419363 kubelet[1954]: E0710 00:22:57.419341 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.419441 kubelet[1954]: E0710 00:22:57.419430 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.419441 kubelet[1954]: W0710 00:22:57.419439 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.419498 kubelet[1954]: E0710 00:22:57.419450 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.419634 kubelet[1954]: E0710 00:22:57.419622 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.419634 kubelet[1954]: W0710 00:22:57.419632 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.419691 kubelet[1954]: E0710 00:22:57.419671 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.419778 kubelet[1954]: E0710 00:22:57.419768 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.419778 kubelet[1954]: W0710 00:22:57.419777 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.419885 kubelet[1954]: E0710 00:22:57.419855 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.419933 kubelet[1954]: E0710 00:22:57.419925 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.419933 kubelet[1954]: W0710 00:22:57.419932 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.419992 kubelet[1954]: E0710 00:22:57.419944 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.421223 kubelet[1954]: E0710 00:22:57.421203 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.421223 kubelet[1954]: W0710 00:22:57.421220 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.421330 kubelet[1954]: E0710 00:22:57.421238 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.421534 kubelet[1954]: E0710 00:22:57.421507 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.421579 kubelet[1954]: W0710 00:22:57.421534 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.421579 kubelet[1954]: E0710 00:22:57.421553 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.421779 kubelet[1954]: E0710 00:22:57.421734 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.421779 kubelet[1954]: W0710 00:22:57.421744 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.421779 kubelet[1954]: E0710 00:22:57.421754 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.422006 kubelet[1954]: E0710 00:22:57.421962 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.422006 kubelet[1954]: W0710 00:22:57.421978 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.422006 kubelet[1954]: E0710 00:22:57.421989 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.430091 kubelet[1954]: E0710 00:22:57.430065 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:57.430091 kubelet[1954]: W0710 00:22:57.430086 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:57.430247 kubelet[1954]: E0710 00:22:57.430104 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:57.699000 audit[2478]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:57.699000 audit[2478]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffffe6af6c0 a2=0 a3=1 items=0 ppid=2105 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:57.699000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:57.704000 audit[2478]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:22:57.704000 audit[2478]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffe6af6c0 a2=0 a3=1 items=0 ppid=2105 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:57.704000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:22:58.179878 kubelet[1954]: E0710 00:22:58.179782 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:58.179878 kubelet[1954]: W0710 00:22:58.179808 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:58.179878 kubelet[1954]: E0710 00:22:58.179831 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:58.213912 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount879455959.mount: Deactivated successfully. Jul 10 00:22:58.244561 env[1220]: time="2025-07-10T00:22:58.244263280Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-lmn8n,Uid:6300516d-6953-4519-abcb-3e2d40649a05,Namespace:calico-system,Attempt:0,}" Jul 10 00:22:58.282589 env[1220]: time="2025-07-10T00:22:58.281876128Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:22:58.282589 env[1220]: time="2025-07-10T00:22:58.281915090Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:22:58.282589 env[1220]: time="2025-07-10T00:22:58.281925371Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:22:58.282589 env[1220]: time="2025-07-10T00:22:58.282075699Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ae9ac04e34b0219482be3561d9bbd6a4e4e6d41d0915fa738483e4e44928a4bb pid=2488 runtime=io.containerd.runc.v2 Jul 10 00:22:58.303225 systemd[1]: Started cri-containerd-ae9ac04e34b0219482be3561d9bbd6a4e4e6d41d0915fa738483e4e44928a4bb.scope. Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.346000 audit: BPF prog-id=119 op=LOAD Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396163303465333462303231393438326265333536316439626264 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396163303465333462303231393438326265333536316439626264 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit: BPF prog-id=120 op=LOAD Jul 10 00:22:58.347000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396163303465333462303231393438326265333536316439626264 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit: BPF prog-id=121 op=LOAD Jul 10 00:22:58.347000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396163303465333462303231393438326265333536316439626264 Jul 10 00:22:58.347000 audit: BPF prog-id=121 op=UNLOAD Jul 10 00:22:58.347000 audit: BPF prog-id=120 op=UNLOAD Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { perfmon } for pid=2497 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit[2497]: AVC avc: denied { bpf } for pid=2497 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.347000 audit: BPF prog-id=122 op=LOAD Jul 10 00:22:58.347000 audit[2497]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2488 pid=2497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.347000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165396163303465333462303231393438326265333536316439626264 Jul 10 00:22:58.368782 env[1220]: time="2025-07-10T00:22:58.368722121Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-lmn8n,Uid:6300516d-6953-4519-abcb-3e2d40649a05,Namespace:calico-system,Attempt:0,} returns sandbox id \"ae9ac04e34b0219482be3561d9bbd6a4e4e6d41d0915fa738483e4e44928a4bb\"" Jul 10 00:22:58.837227 env[1220]: time="2025-07-10T00:22:58.837172822Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:58.838555 env[1220]: time="2025-07-10T00:22:58.838510858Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:58.842137 env[1220]: time="2025-07-10T00:22:58.841505627Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:58.843992 env[1220]: time="2025-07-10T00:22:58.843954846Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:22:58.844990 env[1220]: time="2025-07-10T00:22:58.844955422Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 10 00:22:58.846500 env[1220]: time="2025-07-10T00:22:58.846471308Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 10 00:22:58.854116 env[1220]: time="2025-07-10T00:22:58.854067578Z" level=info msg="CreateContainer within sandbox \"4afb5d9883cbdf3a5fcd3b66390ff7385795cd52d70e4a6b0221a943cfbdbf46\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 10 00:22:58.863792 env[1220]: time="2025-07-10T00:22:58.863743125Z" level=info msg="CreateContainer within sandbox \"4afb5d9883cbdf3a5fcd3b66390ff7385795cd52d70e4a6b0221a943cfbdbf46\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"4c6a5cd2bd9920f344ffcf525b622d50b15ed15e6f0356b088eaa84f48bc1a2e\"" Jul 10 00:22:58.865971 env[1220]: time="2025-07-10T00:22:58.865923888Z" level=info msg="StartContainer for \"4c6a5cd2bd9920f344ffcf525b622d50b15ed15e6f0356b088eaa84f48bc1a2e\"" Jul 10 00:22:58.884891 systemd[1]: Started cri-containerd-4c6a5cd2bd9920f344ffcf525b622d50b15ed15e6f0356b088eaa84f48bc1a2e.scope. Jul 10 00:22:58.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.921000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.921000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.922000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.922000 audit: BPF prog-id=123 op=LOAD Jul 10 00:22:58.922000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.922000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2379 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366135636432626439393230663334346666636635323562363232 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2379 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366135636432626439393230663334346666636635323562363232 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.923000 audit: BPF prog-id=124 op=LOAD Jul 10 00:22:58.923000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2379 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.923000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366135636432626439393230663334346666636635323562363232 Jul 10 00:22:58.924000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.924000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.924000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.924000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.924000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.924000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.924000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.924000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.924000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.924000 audit: BPF prog-id=125 op=LOAD Jul 10 00:22:58.924000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2379 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366135636432626439393230663334346666636635323562363232 Jul 10 00:22:58.924000 audit: BPF prog-id=125 op=UNLOAD Jul 10 00:22:58.924000 audit: BPF prog-id=124 op=UNLOAD Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { perfmon } for pid=2531 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit[2531]: AVC avc: denied { bpf } for pid=2531 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:22:58.925000 audit: BPF prog-id=126 op=LOAD Jul 10 00:22:58.925000 audit[2531]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2379 pid=2531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:22:58.925000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463366135636432626439393230663334346666636635323562363232 Jul 10 00:22:58.989273 env[1220]: time="2025-07-10T00:22:58.989223344Z" level=info msg="StartContainer for \"4c6a5cd2bd9920f344ffcf525b622d50b15ed15e6f0356b088eaa84f48bc1a2e\" returns successfully" Jul 10 00:22:59.368945 kubelet[1954]: E0710 00:22:59.368871 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-h85xd" podUID="a340f1a4-77e3-476c-904c-86c322c2b72e" Jul 10 00:22:59.448803 kubelet[1954]: E0710 00:22:59.448777 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:22:59.519048 kubelet[1954]: E0710 00:22:59.519009 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.519048 kubelet[1954]: W0710 00:22:59.519033 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.519048 kubelet[1954]: E0710 00:22:59.519053 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.519290 kubelet[1954]: E0710 00:22:59.519231 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.519290 kubelet[1954]: W0710 00:22:59.519241 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.519290 kubelet[1954]: E0710 00:22:59.519279 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.519468 kubelet[1954]: E0710 00:22:59.519442 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.519468 kubelet[1954]: W0710 00:22:59.519454 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.519468 kubelet[1954]: E0710 00:22:59.519463 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.519643 kubelet[1954]: E0710 00:22:59.519624 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.519643 kubelet[1954]: W0710 00:22:59.519635 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.519643 kubelet[1954]: E0710 00:22:59.519644 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.519853 kubelet[1954]: E0710 00:22:59.519835 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.519853 kubelet[1954]: W0710 00:22:59.519847 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.519908 kubelet[1954]: E0710 00:22:59.519856 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.520002 kubelet[1954]: E0710 00:22:59.519985 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.520002 kubelet[1954]: W0710 00:22:59.519996 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.520061 kubelet[1954]: E0710 00:22:59.520003 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.520140 kubelet[1954]: E0710 00:22:59.520129 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.520140 kubelet[1954]: W0710 00:22:59.520138 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.520189 kubelet[1954]: E0710 00:22:59.520146 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.520276 kubelet[1954]: E0710 00:22:59.520267 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.520303 kubelet[1954]: W0710 00:22:59.520276 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.520303 kubelet[1954]: E0710 00:22:59.520284 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.520431 kubelet[1954]: E0710 00:22:59.520421 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.520431 kubelet[1954]: W0710 00:22:59.520430 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.520479 kubelet[1954]: E0710 00:22:59.520437 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.520577 kubelet[1954]: E0710 00:22:59.520566 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.520577 kubelet[1954]: W0710 00:22:59.520576 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.520636 kubelet[1954]: E0710 00:22:59.520584 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.520716 kubelet[1954]: E0710 00:22:59.520706 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.520743 kubelet[1954]: W0710 00:22:59.520716 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.520743 kubelet[1954]: E0710 00:22:59.520723 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.520856 kubelet[1954]: E0710 00:22:59.520847 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.520885 kubelet[1954]: W0710 00:22:59.520856 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.520885 kubelet[1954]: E0710 00:22:59.520863 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.521001 kubelet[1954]: E0710 00:22:59.520991 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.521071 kubelet[1954]: W0710 00:22:59.521001 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.521071 kubelet[1954]: E0710 00:22:59.521008 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.521154 kubelet[1954]: E0710 00:22:59.521143 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.521154 kubelet[1954]: W0710 00:22:59.521152 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.521203 kubelet[1954]: E0710 00:22:59.521160 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.521294 kubelet[1954]: E0710 00:22:59.521285 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.521323 kubelet[1954]: W0710 00:22:59.521294 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.521323 kubelet[1954]: E0710 00:22:59.521302 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.536761 kubelet[1954]: E0710 00:22:59.536727 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.536761 kubelet[1954]: W0710 00:22:59.536748 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.536761 kubelet[1954]: E0710 00:22:59.536767 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.536991 kubelet[1954]: E0710 00:22:59.536968 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.536991 kubelet[1954]: W0710 00:22:59.536981 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.537062 kubelet[1954]: E0710 00:22:59.536994 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.537233 kubelet[1954]: E0710 00:22:59.537212 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.537233 kubelet[1954]: W0710 00:22:59.537224 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.537289 kubelet[1954]: E0710 00:22:59.537238 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.537436 kubelet[1954]: E0710 00:22:59.537416 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.537436 kubelet[1954]: W0710 00:22:59.537429 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.537492 kubelet[1954]: E0710 00:22:59.537445 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.537617 kubelet[1954]: E0710 00:22:59.537599 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.537617 kubelet[1954]: W0710 00:22:59.537611 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.537673 kubelet[1954]: E0710 00:22:59.537623 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.537804 kubelet[1954]: E0710 00:22:59.537785 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.537804 kubelet[1954]: W0710 00:22:59.537797 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.537869 kubelet[1954]: E0710 00:22:59.537809 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.537984 kubelet[1954]: E0710 00:22:59.537973 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.537984 kubelet[1954]: W0710 00:22:59.537984 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.538040 kubelet[1954]: E0710 00:22:59.538010 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.538143 kubelet[1954]: E0710 00:22:59.538132 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.538183 kubelet[1954]: W0710 00:22:59.538145 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.538209 kubelet[1954]: E0710 00:22:59.538172 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.538298 kubelet[1954]: E0710 00:22:59.538285 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.538298 kubelet[1954]: W0710 00:22:59.538296 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.538354 kubelet[1954]: E0710 00:22:59.538311 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.538547 kubelet[1954]: E0710 00:22:59.538530 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.538594 kubelet[1954]: W0710 00:22:59.538546 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.538594 kubelet[1954]: E0710 00:22:59.538564 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.538756 kubelet[1954]: E0710 00:22:59.538741 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.538756 kubelet[1954]: W0710 00:22:59.538754 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.538822 kubelet[1954]: E0710 00:22:59.538769 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.538930 kubelet[1954]: E0710 00:22:59.538915 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.538930 kubelet[1954]: W0710 00:22:59.538929 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.538998 kubelet[1954]: E0710 00:22:59.538938 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.539129 kubelet[1954]: E0710 00:22:59.539113 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.539129 kubelet[1954]: W0710 00:22:59.539128 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.539197 kubelet[1954]: E0710 00:22:59.539142 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.539435 kubelet[1954]: E0710 00:22:59.539415 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.539540 kubelet[1954]: W0710 00:22:59.539523 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.539617 kubelet[1954]: E0710 00:22:59.539602 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.539905 kubelet[1954]: E0710 00:22:59.539886 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.539987 kubelet[1954]: W0710 00:22:59.539969 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.540089 kubelet[1954]: E0710 00:22:59.540075 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.540284 kubelet[1954]: E0710 00:22:59.540267 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.540284 kubelet[1954]: W0710 00:22:59.540282 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.540363 kubelet[1954]: E0710 00:22:59.540298 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.540473 kubelet[1954]: E0710 00:22:59.540459 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.540473 kubelet[1954]: W0710 00:22:59.540471 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.540539 kubelet[1954]: E0710 00:22:59.540479 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:22:59.540780 kubelet[1954]: E0710 00:22:59.540754 1954 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 10 00:22:59.540780 kubelet[1954]: W0710 00:22:59.540767 1954 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 10 00:22:59.540780 kubelet[1954]: E0710 00:22:59.540777 1954 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 10 00:23:00.229308 env[1220]: time="2025-07-10T00:23:00.229198883Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:00.255440 env[1220]: time="2025-07-10T00:23:00.255387529Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:00.267408 env[1220]: time="2025-07-10T00:23:00.267367153Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:00.268595 env[1220]: time="2025-07-10T00:23:00.268564976Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:00.269154 env[1220]: time="2025-07-10T00:23:00.269122885Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 10 00:23:00.271381 env[1220]: time="2025-07-10T00:23:00.271348161Z" level=info msg="CreateContainer within sandbox \"ae9ac04e34b0219482be3561d9bbd6a4e4e6d41d0915fa738483e4e44928a4bb\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 10 00:23:00.285583 env[1220]: time="2025-07-10T00:23:00.283797970Z" level=info msg="CreateContainer within sandbox \"ae9ac04e34b0219482be3561d9bbd6a4e4e6d41d0915fa738483e4e44928a4bb\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"39a9c3181b3224058aa395d5e630999f5111d1ee0b1bc6c77d19beea29df5540\"" Jul 10 00:23:00.285988 env[1220]: time="2025-07-10T00:23:00.285960203Z" level=info msg="StartContainer for \"39a9c3181b3224058aa395d5e630999f5111d1ee0b1bc6c77d19beea29df5540\"" Jul 10 00:23:00.310372 systemd[1]: Started cri-containerd-39a9c3181b3224058aa395d5e630999f5111d1ee0b1bc6c77d19beea29df5540.scope. Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2488 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:00.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613963333138316233323234303538616133393564356536333039 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.344000 audit: BPF prog-id=127 op=LOAD Jul 10 00:23:00.344000 audit[2605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2488 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:00.344000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613963333138316233323234303538616133393564356536333039 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit: BPF prog-id=128 op=LOAD Jul 10 00:23:00.345000 audit[2605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2488 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:00.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613963333138316233323234303538616133393564356536333039 Jul 10 00:23:00.345000 audit: BPF prog-id=128 op=UNLOAD Jul 10 00:23:00.345000 audit: BPF prog-id=127 op=UNLOAD Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { perfmon } for pid=2605 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit[2605]: AVC avc: denied { bpf } for pid=2605 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:00.345000 audit: BPF prog-id=129 op=LOAD Jul 10 00:23:00.345000 audit[2605]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2488 pid=2605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:00.345000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3339613963333138316233323234303538616133393564356536333039 Jul 10 00:23:00.358286 env[1220]: time="2025-07-10T00:23:00.358232173Z" level=info msg="StartContainer for \"39a9c3181b3224058aa395d5e630999f5111d1ee0b1bc6c77d19beea29df5540\" returns successfully" Jul 10 00:23:00.387175 systemd[1]: cri-containerd-39a9c3181b3224058aa395d5e630999f5111d1ee0b1bc6c77d19beea29df5540.scope: Deactivated successfully. Jul 10 00:23:00.392000 audit: BPF prog-id=129 op=UNLOAD Jul 10 00:23:00.409410 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-39a9c3181b3224058aa395d5e630999f5111d1ee0b1bc6c77d19beea29df5540-rootfs.mount: Deactivated successfully. Jul 10 00:23:00.428847 env[1220]: time="2025-07-10T00:23:00.428799253Z" level=info msg="shim disconnected" id=39a9c3181b3224058aa395d5e630999f5111d1ee0b1bc6c77d19beea29df5540 Jul 10 00:23:00.428847 env[1220]: time="2025-07-10T00:23:00.428846296Z" level=warning msg="cleaning up after shim disconnected" id=39a9c3181b3224058aa395d5e630999f5111d1ee0b1bc6c77d19beea29df5540 namespace=k8s.io Jul 10 00:23:00.428847 env[1220]: time="2025-07-10T00:23:00.428855416Z" level=info msg="cleaning up dead shim" Jul 10 00:23:00.435380 env[1220]: time="2025-07-10T00:23:00.435343354Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:23:00Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2642 runtime=io.containerd.runc.v2\n" Jul 10 00:23:00.451574 kubelet[1954]: I0710 00:23:00.451549 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:00.452651 kubelet[1954]: E0710 00:23:00.452629 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:00.454417 env[1220]: time="2025-07-10T00:23:00.453742954Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 10 00:23:00.467325 kubelet[1954]: I0710 00:23:00.467078 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-7f45db7db6-mvb66" podStartSLOduration=2.7593844279999997 podStartE2EDuration="4.467060209s" podCreationTimestamp="2025-07-10 00:22:56 +0000 UTC" firstStartedPulling="2025-07-10 00:22:57.138651079 +0000 UTC m=+21.853454519" lastFinishedPulling="2025-07-10 00:22:58.84632686 +0000 UTC m=+23.561130300" observedRunningTime="2025-07-10 00:22:59.464391728 +0000 UTC m=+24.179195208" watchObservedRunningTime="2025-07-10 00:23:00.467060209 +0000 UTC m=+25.181863689" Jul 10 00:23:01.369184 kubelet[1954]: E0710 00:23:01.369124 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-h85xd" podUID="a340f1a4-77e3-476c-904c-86c322c2b72e" Jul 10 00:23:03.288112 env[1220]: time="2025-07-10T00:23:03.288065279Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:03.290904 env[1220]: time="2025-07-10T00:23:03.290867609Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:03.292213 env[1220]: time="2025-07-10T00:23:03.292179110Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:03.293647 env[1220]: time="2025-07-10T00:23:03.293613457Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:03.294202 env[1220]: time="2025-07-10T00:23:03.294177723Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 10 00:23:03.296448 env[1220]: time="2025-07-10T00:23:03.296415908Z" level=info msg="CreateContainer within sandbox \"ae9ac04e34b0219482be3561d9bbd6a4e4e6d41d0915fa738483e4e44928a4bb\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 10 00:23:03.313587 env[1220]: time="2025-07-10T00:23:03.313528464Z" level=info msg="CreateContainer within sandbox \"ae9ac04e34b0219482be3561d9bbd6a4e4e6d41d0915fa738483e4e44928a4bb\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"31f39bc5e3c97d64fdf9bd01b5cfd424097e9acc1c981d07a6c2a18748fb1643\"" Jul 10 00:23:03.314313 env[1220]: time="2025-07-10T00:23:03.314216576Z" level=info msg="StartContainer for \"31f39bc5e3c97d64fdf9bd01b5cfd424097e9acc1c981d07a6c2a18748fb1643\"" Jul 10 00:23:03.337253 systemd[1]: Started cri-containerd-31f39bc5e3c97d64fdf9bd01b5cfd424097e9acc1c981d07a6c2a18748fb1643.scope. Jul 10 00:23:03.368568 kubelet[1954]: E0710 00:23:03.368528 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-h85xd" podUID="a340f1a4-77e3-476c-904c-86c322c2b72e" Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.404149 kernel: kauditd_printk_skb: 223 callbacks suppressed Jul 10 00:23:03.404218 kernel: audit: type=1400 audit(1752106983.400:994): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.404254 kernel: audit: type=1300 audit(1752106983.400:994): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2488 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:03.400000 audit[2666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2488 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:03.407067 kernel: audit: type=1327 audit(1752106983.400:994): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663339626335653363393764363466646639626430316235636664 Jul 10 00:23:03.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663339626335653363393764363466646639626430316235636664 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.411348 kernel: audit: type=1400 audit(1752106983.400:995): avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.414023 kernel: audit: type=1400 audit(1752106983.400:995): avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.417650 kernel: audit: type=1400 audit(1752106983.400:995): avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.419968 kernel: audit: type=1400 audit(1752106983.400:995): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.420073 kernel: audit: type=1400 audit(1752106983.400:995): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.424583 kernel: audit: type=1400 audit(1752106983.400:995): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.426650 kernel: audit: type=1400 audit(1752106983.400:995): avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit: BPF prog-id=130 op=LOAD Jul 10 00:23:03.400000 audit[2666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2488 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:03.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663339626335653363393764363466646639626430316235636664 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.400000 audit: BPF prog-id=131 op=LOAD Jul 10 00:23:03.400000 audit[2666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2488 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:03.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663339626335653363393764363466646639626430316235636664 Jul 10 00:23:03.402000 audit: BPF prog-id=131 op=UNLOAD Jul 10 00:23:03.402000 audit: BPF prog-id=130 op=UNLOAD Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { perfmon } for pid=2666 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit[2666]: AVC avc: denied { bpf } for pid=2666 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:03.402000 audit: BPF prog-id=132 op=LOAD Jul 10 00:23:03.402000 audit[2666]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2488 pid=2666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:03.402000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331663339626335653363393764363466646639626430316235636664 Jul 10 00:23:03.477576 env[1220]: time="2025-07-10T00:23:03.477526492Z" level=info msg="StartContainer for \"31f39bc5e3c97d64fdf9bd01b5cfd424097e9acc1c981d07a6c2a18748fb1643\" returns successfully" Jul 10 00:23:03.974369 env[1220]: time="2025-07-10T00:23:03.974307200Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 10 00:23:03.976821 systemd[1]: cri-containerd-31f39bc5e3c97d64fdf9bd01b5cfd424097e9acc1c981d07a6c2a18748fb1643.scope: Deactivated successfully. Jul 10 00:23:03.980000 audit: BPF prog-id=132 op=UNLOAD Jul 10 00:23:03.988153 kubelet[1954]: I0710 00:23:03.988127 1954 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 10 00:23:04.002140 env[1220]: time="2025-07-10T00:23:04.002098612Z" level=info msg="shim disconnected" id=31f39bc5e3c97d64fdf9bd01b5cfd424097e9acc1c981d07a6c2a18748fb1643 Jul 10 00:23:04.002140 env[1220]: time="2025-07-10T00:23:04.002140174Z" level=warning msg="cleaning up after shim disconnected" id=31f39bc5e3c97d64fdf9bd01b5cfd424097e9acc1c981d07a6c2a18748fb1643 namespace=k8s.io Jul 10 00:23:04.002338 env[1220]: time="2025-07-10T00:23:04.002148694Z" level=info msg="cleaning up dead shim" Jul 10 00:23:04.024282 env[1220]: time="2025-07-10T00:23:04.024015835Z" level=warning msg="cleanup warnings time=\"2025-07-10T00:23:04Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2707 runtime=io.containerd.runc.v2\n" Jul 10 00:23:04.028492 systemd[1]: Created slice kubepods-burstable-pod8f02d0b0_7a70_46bc_8b53_185546b4a81e.slice. Jul 10 00:23:04.033641 systemd[1]: Created slice kubepods-besteffort-pod6e918f70_1421_4e8c_8eef_8816ce28a991.slice. Jul 10 00:23:04.039343 systemd[1]: Created slice kubepods-besteffort-pod9f425f73_8318_49fa_af06_9948e0e05d64.slice. Jul 10 00:23:04.043936 systemd[1]: Created slice kubepods-burstable-poda6d4bc53_3592_4a6e_b241_bac460e392b6.slice. Jul 10 00:23:04.049394 systemd[1]: Created slice kubepods-besteffort-podda818693_d65f_4038_8ac3_0ad75a266860.slice. Jul 10 00:23:04.052879 systemd[1]: Created slice kubepods-besteffort-podd03adf9e_4660_4abe_a04b_c2b850c5a08c.slice. Jul 10 00:23:04.057778 systemd[1]: Created slice kubepods-besteffort-podc56cff78_16c3_42dd_83a4_d757eb25e1b9.slice. Jul 10 00:23:04.072412 kubelet[1954]: I0710 00:23:04.072379 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4nz8c\" (UniqueName: \"kubernetes.io/projected/a6d4bc53-3592-4a6e-b241-bac460e392b6-kube-api-access-4nz8c\") pod \"coredns-668d6bf9bc-gvm6b\" (UID: \"a6d4bc53-3592-4a6e-b241-bac460e392b6\") " pod="kube-system/coredns-668d6bf9bc-gvm6b" Jul 10 00:23:04.072638 kubelet[1954]: I0710 00:23:04.072621 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lpmdb\" (UniqueName: \"kubernetes.io/projected/8f02d0b0-7a70-46bc-8b53-185546b4a81e-kube-api-access-lpmdb\") pod \"coredns-668d6bf9bc-2h6l7\" (UID: \"8f02d0b0-7a70-46bc-8b53-185546b4a81e\") " pod="kube-system/coredns-668d6bf9bc-2h6l7" Jul 10 00:23:04.072730 kubelet[1954]: I0710 00:23:04.072715 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/6e918f70-1421-4e8c-8eef-8816ce28a991-goldmane-key-pair\") pod \"goldmane-768f4c5c69-cq5bc\" (UID: \"6e918f70-1421-4e8c-8eef-8816ce28a991\") " pod="calico-system/goldmane-768f4c5c69-cq5bc" Jul 10 00:23:04.072809 kubelet[1954]: I0710 00:23:04.072796 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/c56cff78-16c3-42dd-83a4-d757eb25e1b9-tigera-ca-bundle\") pod \"calico-kube-controllers-7796764495-pbp4c\" (UID: \"c56cff78-16c3-42dd-83a4-d757eb25e1b9\") " pod="calico-system/calico-kube-controllers-7796764495-pbp4c" Jul 10 00:23:04.072893 kubelet[1954]: I0710 00:23:04.072878 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/6e918f70-1421-4e8c-8eef-8816ce28a991-config\") pod \"goldmane-768f4c5c69-cq5bc\" (UID: \"6e918f70-1421-4e8c-8eef-8816ce28a991\") " pod="calico-system/goldmane-768f4c5c69-cq5bc" Jul 10 00:23:04.072973 kubelet[1954]: I0710 00:23:04.072960 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kv75t\" (UniqueName: \"kubernetes.io/projected/6e918f70-1421-4e8c-8eef-8816ce28a991-kube-api-access-kv75t\") pod \"goldmane-768f4c5c69-cq5bc\" (UID: \"6e918f70-1421-4e8c-8eef-8816ce28a991\") " pod="calico-system/goldmane-768f4c5c69-cq5bc" Jul 10 00:23:04.073055 kubelet[1954]: I0710 00:23:04.073041 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7k2r2\" (UniqueName: \"kubernetes.io/projected/9f425f73-8318-49fa-af06-9948e0e05d64-kube-api-access-7k2r2\") pod \"calico-apiserver-5855c84685-w8lqr\" (UID: \"9f425f73-8318-49fa-af06-9948e0e05d64\") " pod="calico-apiserver/calico-apiserver-5855c84685-w8lqr" Jul 10 00:23:04.073126 kubelet[1954]: I0710 00:23:04.073113 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/da818693-d65f-4038-8ac3-0ad75a266860-calico-apiserver-certs\") pod \"calico-apiserver-5855c84685-tnkkl\" (UID: \"da818693-d65f-4038-8ac3-0ad75a266860\") " pod="calico-apiserver/calico-apiserver-5855c84685-tnkkl" Jul 10 00:23:04.073193 kubelet[1954]: I0710 00:23:04.073181 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qrmp2\" (UniqueName: \"kubernetes.io/projected/da818693-d65f-4038-8ac3-0ad75a266860-kube-api-access-qrmp2\") pod \"calico-apiserver-5855c84685-tnkkl\" (UID: \"da818693-d65f-4038-8ac3-0ad75a266860\") " pod="calico-apiserver/calico-apiserver-5855c84685-tnkkl" Jul 10 00:23:04.073274 kubelet[1954]: I0710 00:23:04.073260 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/9f425f73-8318-49fa-af06-9948e0e05d64-calico-apiserver-certs\") pod \"calico-apiserver-5855c84685-w8lqr\" (UID: \"9f425f73-8318-49fa-af06-9948e0e05d64\") " pod="calico-apiserver/calico-apiserver-5855c84685-w8lqr" Jul 10 00:23:04.073366 kubelet[1954]: I0710 00:23:04.073352 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d03adf9e-4660-4abe-a04b-c2b850c5a08c-whisker-ca-bundle\") pod \"whisker-65c4dbfd78-fk7px\" (UID: \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\") " pod="calico-system/whisker-65c4dbfd78-fk7px" Jul 10 00:23:04.073458 kubelet[1954]: I0710 00:23:04.073437 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d03adf9e-4660-4abe-a04b-c2b850c5a08c-whisker-backend-key-pair\") pod \"whisker-65c4dbfd78-fk7px\" (UID: \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\") " pod="calico-system/whisker-65c4dbfd78-fk7px" Jul 10 00:23:04.073554 kubelet[1954]: I0710 00:23:04.073538 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dnbjc\" (UniqueName: \"kubernetes.io/projected/d03adf9e-4660-4abe-a04b-c2b850c5a08c-kube-api-access-dnbjc\") pod \"whisker-65c4dbfd78-fk7px\" (UID: \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\") " pod="calico-system/whisker-65c4dbfd78-fk7px" Jul 10 00:23:04.073633 kubelet[1954]: I0710 00:23:04.073618 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9ckm8\" (UniqueName: \"kubernetes.io/projected/c56cff78-16c3-42dd-83a4-d757eb25e1b9-kube-api-access-9ckm8\") pod \"calico-kube-controllers-7796764495-pbp4c\" (UID: \"c56cff78-16c3-42dd-83a4-d757eb25e1b9\") " pod="calico-system/calico-kube-controllers-7796764495-pbp4c" Jul 10 00:23:04.073720 kubelet[1954]: I0710 00:23:04.073706 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/6e918f70-1421-4e8c-8eef-8816ce28a991-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-cq5bc\" (UID: \"6e918f70-1421-4e8c-8eef-8816ce28a991\") " pod="calico-system/goldmane-768f4c5c69-cq5bc" Jul 10 00:23:04.073802 kubelet[1954]: I0710 00:23:04.073788 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/a6d4bc53-3592-4a6e-b241-bac460e392b6-config-volume\") pod \"coredns-668d6bf9bc-gvm6b\" (UID: \"a6d4bc53-3592-4a6e-b241-bac460e392b6\") " pod="kube-system/coredns-668d6bf9bc-gvm6b" Jul 10 00:23:04.075324 kubelet[1954]: I0710 00:23:04.073866 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/8f02d0b0-7a70-46bc-8b53-185546b4a81e-config-volume\") pod \"coredns-668d6bf9bc-2h6l7\" (UID: \"8f02d0b0-7a70-46bc-8b53-185546b4a81e\") " pod="kube-system/coredns-668d6bf9bc-2h6l7" Jul 10 00:23:04.316175 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-31f39bc5e3c97d64fdf9bd01b5cfd424097e9acc1c981d07a6c2a18748fb1643-rootfs.mount: Deactivated successfully. Jul 10 00:23:04.331490 kubelet[1954]: E0710 00:23:04.331451 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:04.332898 env[1220]: time="2025-07-10T00:23:04.332780568Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-2h6l7,Uid:8f02d0b0-7a70-46bc-8b53-185546b4a81e,Namespace:kube-system,Attempt:0,}" Jul 10 00:23:04.336106 env[1220]: time="2025-07-10T00:23:04.336065236Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-cq5bc,Uid:6e918f70-1421-4e8c-8eef-8816ce28a991,Namespace:calico-system,Attempt:0,}" Jul 10 00:23:04.342839 env[1220]: time="2025-07-10T00:23:04.342648651Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5855c84685-w8lqr,Uid:9f425f73-8318-49fa-af06-9948e0e05d64,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:23:04.349121 kubelet[1954]: E0710 00:23:04.346362 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:04.351616 env[1220]: time="2025-07-10T00:23:04.349494438Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-gvm6b,Uid:a6d4bc53-3592-4a6e-b241-bac460e392b6,Namespace:kube-system,Attempt:0,}" Jul 10 00:23:04.357265 env[1220]: time="2025-07-10T00:23:04.355589312Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-65c4dbfd78-fk7px,Uid:d03adf9e-4660-4abe-a04b-c2b850c5a08c,Namespace:calico-system,Attempt:0,}" Jul 10 00:23:04.357265 env[1220]: time="2025-07-10T00:23:04.355815642Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5855c84685-tnkkl,Uid:da818693-d65f-4038-8ac3-0ad75a266860,Namespace:calico-apiserver,Attempt:0,}" Jul 10 00:23:04.361009 env[1220]: time="2025-07-10T00:23:04.360764504Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7796764495-pbp4c,Uid:c56cff78-16c3-42dd-83a4-d757eb25e1b9,Namespace:calico-system,Attempt:0,}" Jul 10 00:23:04.500364 env[1220]: time="2025-07-10T00:23:04.500324405Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 10 00:23:04.605759 env[1220]: time="2025-07-10T00:23:04.605627730Z" level=error msg="Failed to destroy network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.606376 env[1220]: time="2025-07-10T00:23:04.606331561Z" level=error msg="encountered an error cleaning up failed sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.606447 env[1220]: time="2025-07-10T00:23:04.606390324Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-gvm6b,Uid:a6d4bc53-3592-4a6e-b241-bac460e392b6,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.606712 kubelet[1954]: E0710 00:23:04.606658 1954 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.607283 kubelet[1954]: E0710 00:23:04.607238 1954 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-gvm6b" Jul 10 00:23:04.607283 kubelet[1954]: E0710 00:23:04.607280 1954 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-gvm6b" Jul 10 00:23:04.607384 kubelet[1954]: E0710 00:23:04.607360 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-gvm6b_kube-system(a6d4bc53-3592-4a6e-b241-bac460e392b6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-gvm6b_kube-system(a6d4bc53-3592-4a6e-b241-bac460e392b6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-gvm6b" podUID="a6d4bc53-3592-4a6e-b241-bac460e392b6" Jul 10 00:23:04.613594 env[1220]: time="2025-07-10T00:23:04.613547645Z" level=error msg="Failed to destroy network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.615821 env[1220]: time="2025-07-10T00:23:04.615778985Z" level=error msg="encountered an error cleaning up failed sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.615970 env[1220]: time="2025-07-10T00:23:04.615941712Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-2h6l7,Uid:8f02d0b0-7a70-46bc-8b53-185546b4a81e,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.616320 kubelet[1954]: E0710 00:23:04.616272 1954 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.616395 kubelet[1954]: E0710 00:23:04.616348 1954 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-2h6l7" Jul 10 00:23:04.616395 kubelet[1954]: E0710 00:23:04.616369 1954 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-2h6l7" Jul 10 00:23:04.616510 kubelet[1954]: E0710 00:23:04.616420 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-2h6l7_kube-system(8f02d0b0-7a70-46bc-8b53-185546b4a81e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-2h6l7_kube-system(8f02d0b0-7a70-46bc-8b53-185546b4a81e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-2h6l7" podUID="8f02d0b0-7a70-46bc-8b53-185546b4a81e" Jul 10 00:23:04.618044 env[1220]: time="2025-07-10T00:23:04.618009085Z" level=error msg="Failed to destroy network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.618549 env[1220]: time="2025-07-10T00:23:04.618497867Z" level=error msg="encountered an error cleaning up failed sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.618690 env[1220]: time="2025-07-10T00:23:04.618661114Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7796764495-pbp4c,Uid:c56cff78-16c3-42dd-83a4-d757eb25e1b9,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.619017 kubelet[1954]: E0710 00:23:04.618987 1954 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.619103 kubelet[1954]: E0710 00:23:04.619033 1954 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7796764495-pbp4c" Jul 10 00:23:04.619103 kubelet[1954]: E0710 00:23:04.619051 1954 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-7796764495-pbp4c" Jul 10 00:23:04.619168 env[1220]: time="2025-07-10T00:23:04.618994049Z" level=error msg="Failed to destroy network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.619206 kubelet[1954]: E0710 00:23:04.619090 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-7796764495-pbp4c_calico-system(c56cff78-16c3-42dd-83a4-d757eb25e1b9)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-7796764495-pbp4c_calico-system(c56cff78-16c3-42dd-83a4-d757eb25e1b9)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7796764495-pbp4c" podUID="c56cff78-16c3-42dd-83a4-d757eb25e1b9" Jul 10 00:23:04.619361 env[1220]: time="2025-07-10T00:23:04.619321864Z" level=error msg="encountered an error cleaning up failed sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.619418 env[1220]: time="2025-07-10T00:23:04.619368906Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5855c84685-w8lqr,Uid:9f425f73-8318-49fa-af06-9948e0e05d64,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.620094 kubelet[1954]: E0710 00:23:04.619974 1954 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.620094 kubelet[1954]: E0710 00:23:04.620012 1954 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5855c84685-w8lqr" Jul 10 00:23:04.620094 kubelet[1954]: E0710 00:23:04.620027 1954 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5855c84685-w8lqr" Jul 10 00:23:04.620388 kubelet[1954]: E0710 00:23:04.620068 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5855c84685-w8lqr_calico-apiserver(9f425f73-8318-49fa-af06-9948e0e05d64)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5855c84685-w8lqr_calico-apiserver(9f425f73-8318-49fa-af06-9948e0e05d64)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5855c84685-w8lqr" podUID="9f425f73-8318-49fa-af06-9948e0e05d64" Jul 10 00:23:04.636587 env[1220]: time="2025-07-10T00:23:04.636506115Z" level=error msg="Failed to destroy network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.636922 env[1220]: time="2025-07-10T00:23:04.636893372Z" level=error msg="encountered an error cleaning up failed sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.636980 env[1220]: time="2025-07-10T00:23:04.636944935Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-cq5bc,Uid:6e918f70-1421-4e8c-8eef-8816ce28a991,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.637229 kubelet[1954]: E0710 00:23:04.637184 1954 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.637284 kubelet[1954]: E0710 00:23:04.637255 1954 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-cq5bc" Jul 10 00:23:04.637284 kubelet[1954]: E0710 00:23:04.637275 1954 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-cq5bc" Jul 10 00:23:04.637448 kubelet[1954]: E0710 00:23:04.637326 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-cq5bc_calico-system(6e918f70-1421-4e8c-8eef-8816ce28a991)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-cq5bc_calico-system(6e918f70-1421-4e8c-8eef-8816ce28a991)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-cq5bc" podUID="6e918f70-1421-4e8c-8eef-8816ce28a991" Jul 10 00:23:04.639855 env[1220]: time="2025-07-10T00:23:04.639815063Z" level=error msg="Failed to destroy network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.640296 env[1220]: time="2025-07-10T00:23:04.640250843Z" level=error msg="encountered an error cleaning up failed sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.640479 env[1220]: time="2025-07-10T00:23:04.640432651Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5855c84685-tnkkl,Uid:da818693-d65f-4038-8ac3-0ad75a266860,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.640879 kubelet[1954]: E0710 00:23:04.640853 1954 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.640951 kubelet[1954]: E0710 00:23:04.640893 1954 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5855c84685-tnkkl" Jul 10 00:23:04.640951 kubelet[1954]: E0710 00:23:04.640909 1954 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-5855c84685-tnkkl" Jul 10 00:23:04.641010 kubelet[1954]: E0710 00:23:04.640940 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-5855c84685-tnkkl_calico-apiserver(da818693-d65f-4038-8ac3-0ad75a266860)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-5855c84685-tnkkl_calico-apiserver(da818693-d65f-4038-8ac3-0ad75a266860)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5855c84685-tnkkl" podUID="da818693-d65f-4038-8ac3-0ad75a266860" Jul 10 00:23:04.644335 env[1220]: time="2025-07-10T00:23:04.644296024Z" level=error msg="Failed to destroy network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.644640 env[1220]: time="2025-07-10T00:23:04.644611319Z" level=error msg="encountered an error cleaning up failed sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.644682 env[1220]: time="2025-07-10T00:23:04.644665481Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-65c4dbfd78-fk7px,Uid:d03adf9e-4660-4abe-a04b-c2b850c5a08c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.644851 kubelet[1954]: E0710 00:23:04.644809 1954 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:04.644895 kubelet[1954]: E0710 00:23:04.644856 1954 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-65c4dbfd78-fk7px" Jul 10 00:23:04.644895 kubelet[1954]: E0710 00:23:04.644871 1954 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-65c4dbfd78-fk7px" Jul 10 00:23:04.644987 kubelet[1954]: E0710 00:23:04.644900 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-65c4dbfd78-fk7px_calico-system(d03adf9e-4660-4abe-a04b-c2b850c5a08c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-65c4dbfd78-fk7px_calico-system(d03adf9e-4660-4abe-a04b-c2b850c5a08c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-65c4dbfd78-fk7px" podUID="d03adf9e-4660-4abe-a04b-c2b850c5a08c" Jul 10 00:23:05.309991 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe-shm.mount: Deactivated successfully. Jul 10 00:23:05.310084 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67-shm.mount: Deactivated successfully. Jul 10 00:23:05.377846 systemd[1]: Created slice kubepods-besteffort-poda340f1a4_77e3_476c_904c_86c322c2b72e.slice. Jul 10 00:23:05.380494 env[1220]: time="2025-07-10T00:23:05.380450786Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-h85xd,Uid:a340f1a4-77e3-476c-904c-86c322c2b72e,Namespace:calico-system,Attempt:0,}" Jul 10 00:23:05.430500 env[1220]: time="2025-07-10T00:23:05.430453312Z" level=error msg="Failed to destroy network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.430982 env[1220]: time="2025-07-10T00:23:05.430946614Z" level=error msg="encountered an error cleaning up failed sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.431099 env[1220]: time="2025-07-10T00:23:05.431073019Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-h85xd,Uid:a340f1a4-77e3-476c-904c-86c322c2b72e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.431345 kubelet[1954]: E0710 00:23:05.431274 1954 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.431411 kubelet[1954]: E0710 00:23:05.431379 1954 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-h85xd" Jul 10 00:23:05.431411 kubelet[1954]: E0710 00:23:05.431401 1954 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-h85xd" Jul 10 00:23:05.431474 kubelet[1954]: E0710 00:23:05.431443 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-h85xd_calico-system(a340f1a4-77e3-476c-904c-86c322c2b72e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-h85xd_calico-system(a340f1a4-77e3-476c-904c-86c322c2b72e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-h85xd" podUID="a340f1a4-77e3-476c-904c-86c322c2b72e" Jul 10 00:23:05.432544 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3-shm.mount: Deactivated successfully. Jul 10 00:23:05.495798 kubelet[1954]: I0710 00:23:05.495742 1954 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:05.496467 env[1220]: time="2025-07-10T00:23:05.496432890Z" level=info msg="StopPodSandbox for \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\"" Jul 10 00:23:05.497428 kubelet[1954]: I0710 00:23:05.497214 1954 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:05.499134 env[1220]: time="2025-07-10T00:23:05.499103366Z" level=info msg="StopPodSandbox for \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\"" Jul 10 00:23:05.500699 kubelet[1954]: I0710 00:23:05.500225 1954 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:05.501899 env[1220]: time="2025-07-10T00:23:05.501865766Z" level=info msg="StopPodSandbox for \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\"" Jul 10 00:23:05.505614 kubelet[1954]: I0710 00:23:05.505572 1954 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:05.506973 env[1220]: time="2025-07-10T00:23:05.506684294Z" level=info msg="StopPodSandbox for \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\"" Jul 10 00:23:05.507826 kubelet[1954]: I0710 00:23:05.507454 1954 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:05.509386 env[1220]: time="2025-07-10T00:23:05.509351690Z" level=info msg="StopPodSandbox for \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\"" Jul 10 00:23:05.510844 kubelet[1954]: I0710 00:23:05.510807 1954 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:05.511499 env[1220]: time="2025-07-10T00:23:05.511434780Z" level=info msg="StopPodSandbox for \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\"" Jul 10 00:23:05.511980 kubelet[1954]: I0710 00:23:05.511909 1954 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:05.512470 env[1220]: time="2025-07-10T00:23:05.512442064Z" level=info msg="StopPodSandbox for \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\"" Jul 10 00:23:05.515015 kubelet[1954]: I0710 00:23:05.514982 1954 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:05.516119 env[1220]: time="2025-07-10T00:23:05.516077781Z" level=info msg="StopPodSandbox for \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\"" Jul 10 00:23:05.537712 env[1220]: time="2025-07-10T00:23:05.537660396Z" level=error msg="StopPodSandbox for \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\" failed" error="failed to destroy network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.538101 kubelet[1954]: E0710 00:23:05.538064 1954 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:05.538177 kubelet[1954]: E0710 00:23:05.538131 1954 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2"} Jul 10 00:23:05.538206 kubelet[1954]: E0710 00:23:05.538185 1954 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a6d4bc53-3592-4a6e-b241-bac460e392b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:23:05.538258 kubelet[1954]: E0710 00:23:05.538206 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a6d4bc53-3592-4a6e-b241-bac460e392b6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-gvm6b" podUID="a6d4bc53-3592-4a6e-b241-bac460e392b6" Jul 10 00:23:05.575436 env[1220]: time="2025-07-10T00:23:05.575305747Z" level=error msg="StopPodSandbox for \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\" failed" error="failed to destroy network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.576046 kubelet[1954]: E0710 00:23:05.575905 1954 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:05.576046 kubelet[1954]: E0710 00:23:05.575958 1954 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f"} Jul 10 00:23:05.576046 kubelet[1954]: E0710 00:23:05.575991 1954 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c56cff78-16c3-42dd-83a4-d757eb25e1b9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:23:05.576046 kubelet[1954]: E0710 00:23:05.576012 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c56cff78-16c3-42dd-83a4-d757eb25e1b9\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-7796764495-pbp4c" podUID="c56cff78-16c3-42dd-83a4-d757eb25e1b9" Jul 10 00:23:05.576958 env[1220]: time="2025-07-10T00:23:05.576916897Z" level=error msg="StopPodSandbox for \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\" failed" error="failed to destroy network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.577190 kubelet[1954]: E0710 00:23:05.577086 1954 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:05.577190 kubelet[1954]: E0710 00:23:05.577124 1954 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312"} Jul 10 00:23:05.577190 kubelet[1954]: E0710 00:23:05.577147 1954 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9f425f73-8318-49fa-af06-9948e0e05d64\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:23:05.577190 kubelet[1954]: E0710 00:23:05.577165 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9f425f73-8318-49fa-af06-9948e0e05d64\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5855c84685-w8lqr" podUID="9f425f73-8318-49fa-af06-9948e0e05d64" Jul 10 00:23:05.579789 env[1220]: time="2025-07-10T00:23:05.579742619Z" level=error msg="StopPodSandbox for \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\" failed" error="failed to destroy network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.579949 kubelet[1954]: E0710 00:23:05.579921 1954 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:05.580042 kubelet[1954]: E0710 00:23:05.579957 1954 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f"} Jul 10 00:23:05.580042 kubelet[1954]: E0710 00:23:05.579994 1954 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:23:05.580144 kubelet[1954]: E0710 00:23:05.580029 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-65c4dbfd78-fk7px" podUID="d03adf9e-4660-4abe-a04b-c2b850c5a08c" Jul 10 00:23:05.592615 env[1220]: time="2025-07-10T00:23:05.592554014Z" level=error msg="StopPodSandbox for \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\" failed" error="failed to destroy network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.592800 kubelet[1954]: E0710 00:23:05.592761 1954 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:05.592856 kubelet[1954]: E0710 00:23:05.592805 1954 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe"} Jul 10 00:23:05.592856 kubelet[1954]: E0710 00:23:05.592845 1954 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6e918f70-1421-4e8c-8eef-8816ce28a991\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:23:05.592941 kubelet[1954]: E0710 00:23:05.592865 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6e918f70-1421-4e8c-8eef-8816ce28a991\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-cq5bc" podUID="6e918f70-1421-4e8c-8eef-8816ce28a991" Jul 10 00:23:05.596608 env[1220]: time="2025-07-10T00:23:05.596556948Z" level=error msg="StopPodSandbox for \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\" failed" error="failed to destroy network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.596801 kubelet[1954]: E0710 00:23:05.596765 1954 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:05.596850 kubelet[1954]: E0710 00:23:05.596812 1954 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67"} Jul 10 00:23:05.596877 kubelet[1954]: E0710 00:23:05.596850 1954 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8f02d0b0-7a70-46bc-8b53-185546b4a81e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:23:05.596928 kubelet[1954]: E0710 00:23:05.596872 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8f02d0b0-7a70-46bc-8b53-185546b4a81e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-2h6l7" podUID="8f02d0b0-7a70-46bc-8b53-185546b4a81e" Jul 10 00:23:05.597292 env[1220]: time="2025-07-10T00:23:05.597254858Z" level=error msg="StopPodSandbox for \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\" failed" error="failed to destroy network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.597569 kubelet[1954]: E0710 00:23:05.597487 1954 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:05.597569 kubelet[1954]: E0710 00:23:05.597565 1954 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3"} Jul 10 00:23:05.597663 kubelet[1954]: E0710 00:23:05.597600 1954 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a340f1a4-77e3-476c-904c-86c322c2b72e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:23:05.597663 kubelet[1954]: E0710 00:23:05.597619 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a340f1a4-77e3-476c-904c-86c322c2b72e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-h85xd" podUID="a340f1a4-77e3-476c-904c-86c322c2b72e" Jul 10 00:23:05.598802 env[1220]: time="2025-07-10T00:23:05.598768763Z" level=error msg="StopPodSandbox for \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\" failed" error="failed to destroy network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 10 00:23:05.599040 kubelet[1954]: E0710 00:23:05.598995 1954 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:05.599099 kubelet[1954]: E0710 00:23:05.599042 1954 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d"} Jul 10 00:23:05.599099 kubelet[1954]: E0710 00:23:05.599069 1954 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"da818693-d65f-4038-8ac3-0ad75a266860\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 10 00:23:05.599099 kubelet[1954]: E0710 00:23:05.599086 1954 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"da818693-d65f-4038-8ac3-0ad75a266860\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-5855c84685-tnkkl" podUID="da818693-d65f-4038-8ac3-0ad75a266860" Jul 10 00:23:10.186767 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2099477322.mount: Deactivated successfully. Jul 10 00:23:10.232974 env[1220]: time="2025-07-10T00:23:10.232918199Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:10.236693 env[1220]: time="2025-07-10T00:23:10.236658258Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:10.247321 env[1220]: time="2025-07-10T00:23:10.247288090Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:10.251458 env[1220]: time="2025-07-10T00:23:10.251414522Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:10.251977 env[1220]: time="2025-07-10T00:23:10.251947222Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 10 00:23:10.263895 env[1220]: time="2025-07-10T00:23:10.263840541Z" level=info msg="CreateContainer within sandbox \"ae9ac04e34b0219482be3561d9bbd6a4e4e6d41d0915fa738483e4e44928a4bb\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 10 00:23:10.276110 env[1220]: time="2025-07-10T00:23:10.276069272Z" level=info msg="CreateContainer within sandbox \"ae9ac04e34b0219482be3561d9bbd6a4e4e6d41d0915fa738483e4e44928a4bb\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"6ad741e94fbc2638a307e4988ae36e034eec79ff84832193c60382b3d696a912\"" Jul 10 00:23:10.277651 env[1220]: time="2025-07-10T00:23:10.276931704Z" level=info msg="StartContainer for \"6ad741e94fbc2638a307e4988ae36e034eec79ff84832193c60382b3d696a912\"" Jul 10 00:23:10.298696 kubelet[1954]: I0710 00:23:10.298650 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:10.299301 kubelet[1954]: E0710 00:23:10.299101 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:10.317702 systemd[1]: Started cri-containerd-6ad741e94fbc2638a307e4988ae36e034eec79ff84832193c60382b3d696a912.scope. Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.390877 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 10 00:23:10.390957 kernel: audit: type=1400 audit(1752106990.388:1001): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2488 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:10.395689 kernel: audit: type=1300 audit(1752106990.388:1001): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2488 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:10.395755 kernel: audit: type=1327 audit(1752106990.388:1001): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643734316539346662633236333861333037653439383861653336 Jul 10 00:23:10.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643734316539346662633236333861333037653439383861653336 Jul 10 00:23:10.398073 kernel: audit: type=1400 audit(1752106990.388:1002): avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.403163 kernel: audit: type=1400 audit(1752106990.388:1002): avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.403263 kernel: audit: type=1400 audit(1752106990.388:1002): avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.405938 kernel: audit: type=1400 audit(1752106990.388:1002): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.410365 kernel: audit: type=1400 audit(1752106990.388:1002): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.410428 kernel: audit: type=1400 audit(1752106990.388:1002): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.410450 kernel: audit: type=1400 audit(1752106990.388:1002): avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.388000 audit: BPF prog-id=133 op=LOAD Jul 10 00:23:10.388000 audit[3155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2488 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:10.388000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643734316539346662633236333861333037653439383861653336 Jul 10 00:23:10.389000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.389000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.389000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.389000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.389000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.389000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.389000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.389000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.389000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.389000 audit: BPF prog-id=134 op=LOAD Jul 10 00:23:10.389000 audit[3155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2488 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:10.389000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643734316539346662633236333861333037653439383861653336 Jul 10 00:23:10.391000 audit: BPF prog-id=134 op=UNLOAD Jul 10 00:23:10.391000 audit: BPF prog-id=133 op=UNLOAD Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { perfmon } for pid=3155 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit[3155]: AVC avc: denied { bpf } for pid=3155 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:10.391000 audit: BPF prog-id=135 op=LOAD Jul 10 00:23:10.391000 audit[3155]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2488 pid=3155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:10.391000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661643734316539346662633236333861333037653439383861653336 Jul 10 00:23:10.401000 audit[3172]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3172 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:10.401000 audit[3172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffd424cfe0 a2=0 a3=1 items=0 ppid=2105 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:10.401000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:10.409000 audit[3172]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3172 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:10.409000 audit[3172]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffd424cfe0 a2=0 a3=1 items=0 ppid=2105 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:10.409000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:10.512713 env[1220]: time="2025-07-10T00:23:10.512605965Z" level=info msg="StartContainer for \"6ad741e94fbc2638a307e4988ae36e034eec79ff84832193c60382b3d696a912\" returns successfully" Jul 10 00:23:10.528295 kubelet[1954]: E0710 00:23:10.527565 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:10.556366 kubelet[1954]: I0710 00:23:10.556307 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-lmn8n" podStartSLOduration=1.6852913919999999 podStartE2EDuration="13.556291738s" podCreationTimestamp="2025-07-10 00:22:57 +0000 UTC" firstStartedPulling="2025-07-10 00:22:58.382122159 +0000 UTC m=+23.096925639" lastFinishedPulling="2025-07-10 00:23:10.253122545 +0000 UTC m=+34.967925985" observedRunningTime="2025-07-10 00:23:10.555355783 +0000 UTC m=+35.270159263" watchObservedRunningTime="2025-07-10 00:23:10.556291738 +0000 UTC m=+35.271095218" Jul 10 00:23:10.660545 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 10 00:23:10.660673 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 10 00:23:10.790155 env[1220]: time="2025-07-10T00:23:10.790034407Z" level=info msg="StopPodSandbox for \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\"" Jul 10 00:23:11.035000 audit[3289]: AVC avc: denied { write } for pid=3289 comm="tee" name="fd" dev="proc" ino=21531 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:23:11.035000 audit[3289]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff2b3e7e7 a2=241 a3=1b6 items=1 ppid=3248 pid=3289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.035000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 10 00:23:11.035000 audit: PATH item=0 name="/dev/fd/63" inode=19672 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:23:11.035000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:23:11.048000 audit[3313]: AVC avc: denied { write } for pid=3313 comm="tee" name="fd" dev="proc" ino=18796 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:23:11.048000 audit[3313]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe56aa7e5 a2=241 a3=1b6 items=1 ppid=3257 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.048000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 10 00:23:11.048000 audit: PATH item=0 name="/dev/fd/63" inode=19680 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:23:11.048000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:23:11.048000 audit[3311]: AVC avc: denied { write } for pid=3311 comm="tee" name="fd" dev="proc" ino=18799 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:23:11.048000 audit[3311]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffae397e5 a2=241 a3=1b6 items=1 ppid=3253 pid=3311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.048000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 10 00:23:11.048000 audit: PATH item=0 name="/dev/fd/63" inode=19679 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:23:11.048000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:23:11.056000 audit[3321]: AVC avc: denied { write } for pid=3321 comm="tee" name="fd" dev="proc" ino=18805 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:23:11.056000 audit[3321]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe03e07e6 a2=241 a3=1b6 items=1 ppid=3251 pid=3321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.056000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 10 00:23:11.056000 audit: PATH item=0 name="/dev/fd/63" inode=19683 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:23:11.056000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:10.914 [INFO][3213] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:10.915 [INFO][3213] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" iface="eth0" netns="/var/run/netns/cni-e018bef2-0ed9-e1f9-3eca-506160db1110" Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:10.915 [INFO][3213] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" iface="eth0" netns="/var/run/netns/cni-e018bef2-0ed9-e1f9-3eca-506160db1110" Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:10.918 [INFO][3213] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" iface="eth0" netns="/var/run/netns/cni-e018bef2-0ed9-e1f9-3eca-506160db1110" Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:10.919 [INFO][3213] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:10.919 [INFO][3213] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:11.045 [INFO][3222] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" HandleID="k8s-pod-network.44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Workload="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:11.045 [INFO][3222] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:11.045 [INFO][3222] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:11.056 [WARNING][3222] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" HandleID="k8s-pod-network.44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Workload="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:11.056 [INFO][3222] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" HandleID="k8s-pod-network.44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Workload="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:11.058 [INFO][3222] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:11.062716 env[1220]: 2025-07-10 00:23:11.060 [INFO][3213] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:11.066422 env[1220]: time="2025-07-10T00:23:11.066364180Z" level=info msg="TearDown network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\" successfully" Jul 10 00:23:11.066422 env[1220]: time="2025-07-10T00:23:11.066408182Z" level=info msg="StopPodSandbox for \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\" returns successfully" Jul 10 00:23:11.066000 audit[3318]: AVC avc: denied { write } for pid=3318 comm="tee" name="fd" dev="proc" ino=20591 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:23:11.066000 audit[3318]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd8d8c7d5 a2=241 a3=1b6 items=1 ppid=3247 pid=3318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.066000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 10 00:23:11.067000 audit[3316]: AVC avc: denied { write } for pid=3316 comm="tee" name="fd" dev="proc" ino=20595 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:23:11.067000 audit[3316]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe32ca7d6 a2=241 a3=1b6 items=1 ppid=3254 pid=3316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.067000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 10 00:23:11.067000 audit: PATH item=0 name="/dev/fd/63" inode=19681 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:23:11.067000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:23:11.066000 audit: PATH item=0 name="/dev/fd/63" inode=19682 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:23:11.066000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:23:11.072000 audit[3329]: AVC avc: denied { write } for pid=3329 comm="tee" name="fd" dev="proc" ino=20601 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 10 00:23:11.072000 audit[3329]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc779e7e5 a2=241 a3=1b6 items=1 ppid=3261 pid=3329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.072000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 10 00:23:11.072000 audit: PATH item=0 name="/dev/fd/63" inode=21539 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 10 00:23:11.072000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 10 00:23:11.126881 kubelet[1954]: I0710 00:23:11.126829 1954 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d03adf9e-4660-4abe-a04b-c2b850c5a08c-whisker-backend-key-pair\") pod \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\" (UID: \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\") " Jul 10 00:23:11.126881 kubelet[1954]: I0710 00:23:11.126884 1954 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d03adf9e-4660-4abe-a04b-c2b850c5a08c-whisker-ca-bundle\") pod \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\" (UID: \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\") " Jul 10 00:23:11.127117 kubelet[1954]: I0710 00:23:11.126911 1954 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-dnbjc\" (UniqueName: \"kubernetes.io/projected/d03adf9e-4660-4abe-a04b-c2b850c5a08c-kube-api-access-dnbjc\") pod \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\" (UID: \"d03adf9e-4660-4abe-a04b-c2b850c5a08c\") " Jul 10 00:23:11.131029 kubelet[1954]: I0710 00:23:11.129891 1954 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/d03adf9e-4660-4abe-a04b-c2b850c5a08c-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "d03adf9e-4660-4abe-a04b-c2b850c5a08c" (UID: "d03adf9e-4660-4abe-a04b-c2b850c5a08c"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 10 00:23:11.132361 kubelet[1954]: I0710 00:23:11.132319 1954 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/d03adf9e-4660-4abe-a04b-c2b850c5a08c-kube-api-access-dnbjc" (OuterVolumeSpecName: "kube-api-access-dnbjc") pod "d03adf9e-4660-4abe-a04b-c2b850c5a08c" (UID: "d03adf9e-4660-4abe-a04b-c2b850c5a08c"). InnerVolumeSpecName "kube-api-access-dnbjc". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 10 00:23:11.132460 kubelet[1954]: I0710 00:23:11.132420 1954 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/d03adf9e-4660-4abe-a04b-c2b850c5a08c-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "d03adf9e-4660-4abe-a04b-c2b850c5a08c" (UID: "d03adf9e-4660-4abe-a04b-c2b850c5a08c"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 10 00:23:11.187658 systemd[1]: run-netns-cni\x2de018bef2\x2d0ed9\x2de1f9\x2d3eca\x2d506160db1110.mount: Deactivated successfully. Jul 10 00:23:11.187741 systemd[1]: var-lib-kubelet-pods-d03adf9e\x2d4660\x2d4abe\x2da04b\x2dc2b850c5a08c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2ddnbjc.mount: Deactivated successfully. Jul 10 00:23:11.187797 systemd[1]: var-lib-kubelet-pods-d03adf9e\x2d4660\x2d4abe\x2da04b\x2dc2b850c5a08c-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 10 00:23:11.217000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.217000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.217000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.217000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.217000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.217000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.217000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.217000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.217000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.217000 audit: BPF prog-id=136 op=LOAD Jul 10 00:23:11.217000 audit[3349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd841d308 a2=98 a3=ffffd841d2f8 items=0 ppid=3262 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.217000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:23:11.217000 audit: BPF prog-id=136 op=UNLOAD Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit: BPF prog-id=137 op=LOAD Jul 10 00:23:11.218000 audit[3349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd841d1b8 a2=74 a3=95 items=0 ppid=3262 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.218000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:23:11.218000 audit: BPF prog-id=137 op=UNLOAD Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { bpf } for pid=3349 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit: BPF prog-id=138 op=LOAD Jul 10 00:23:11.218000 audit[3349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd841d1e8 a2=40 a3=ffffd841d218 items=0 ppid=3262 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.218000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:23:11.218000 audit: BPF prog-id=138 op=UNLOAD Jul 10 00:23:11.218000 audit[3349]: AVC avc: denied { perfmon } for pid=3349 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.218000 audit[3349]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffd841d300 a2=50 a3=0 items=0 ppid=3262 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.218000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit: BPF prog-id=139 op=LOAD Jul 10 00:23:11.221000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe9a18d28 a2=98 a3=ffffe9a18d18 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.221000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.221000 audit: BPF prog-id=139 op=UNLOAD Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit: BPF prog-id=140 op=LOAD Jul 10 00:23:11.221000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe9a189b8 a2=74 a3=95 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.221000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.221000 audit: BPF prog-id=140 op=UNLOAD Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.221000 audit: BPF prog-id=141 op=LOAD Jul 10 00:23:11.221000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe9a18a18 a2=94 a3=2 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.221000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.221000 audit: BPF prog-id=141 op=UNLOAD Jul 10 00:23:11.228039 kubelet[1954]: I0710 00:23:11.227987 1954 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/d03adf9e-4660-4abe-a04b-c2b850c5a08c-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 10 00:23:11.228039 kubelet[1954]: I0710 00:23:11.228028 1954 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d03adf9e-4660-4abe-a04b-c2b850c5a08c-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 10 00:23:11.228039 kubelet[1954]: I0710 00:23:11.228040 1954 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-dnbjc\" (UniqueName: \"kubernetes.io/projected/d03adf9e-4660-4abe-a04b-c2b850c5a08c-kube-api-access-dnbjc\") on node \"localhost\" DevicePath \"\"" Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit: BPF prog-id=142 op=LOAD Jul 10 00:23:11.315000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe9a189d8 a2=40 a3=ffffe9a18a08 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.315000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.315000 audit: BPF prog-id=142 op=UNLOAD Jul 10 00:23:11.315000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.315000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe9a18af0 a2=50 a3=0 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.315000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe9a18a48 a2=28 a3=ffffe9a18b78 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9a18a78 a2=28 a3=ffffe9a18ba8 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9a18928 a2=28 a3=ffffe9a18a58 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe9a18a98 a2=28 a3=ffffe9a18bc8 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe9a18a78 a2=28 a3=ffffe9a18ba8 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe9a18a68 a2=28 a3=ffffe9a18b98 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe9a18a98 a2=28 a3=ffffe9a18bc8 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9a18a78 a2=28 a3=ffffe9a18ba8 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9a18a98 a2=28 a3=ffffe9a18bc8 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe9a18a68 a2=28 a3=ffffe9a18b98 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe9a18ae8 a2=28 a3=ffffe9a18c28 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe9a18820 a2=50 a3=0 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit: BPF prog-id=143 op=LOAD Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe9a18828 a2=94 a3=5 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit: BPF prog-id=143 op=UNLOAD Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe9a18930 a2=50 a3=0 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffe9a18a78 a2=4 a3=3 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.324000 audit[3350]: AVC avc: denied { confidentiality } for pid=3350 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:23:11.324000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe9a18a58 a2=94 a3=6 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.324000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { confidentiality } for pid=3350 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:23:11.325000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe9a18228 a2=94 a3=83 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.325000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { perfmon } for pid=3350 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { bpf } for pid=3350 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.325000 audit[3350]: AVC avc: denied { confidentiality } for pid=3350 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:23:11.325000 audit[3350]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe9a18228 a2=94 a3=83 items=0 ppid=3262 pid=3350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.325000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 10 00:23:11.339000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.339000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.339000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.339000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.339000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.339000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.339000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.339000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.339000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.339000 audit: BPF prog-id=144 op=LOAD Jul 10 00:23:11.339000 audit[3369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffce0809f8 a2=98 a3=ffffce0809e8 items=0 ppid=3262 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.339000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:23:11.340000 audit: BPF prog-id=144 op=UNLOAD Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit: BPF prog-id=145 op=LOAD Jul 10 00:23:11.340000 audit[3369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffce0808a8 a2=74 a3=95 items=0 ppid=3262 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.340000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:23:11.340000 audit: BPF prog-id=145 op=UNLOAD Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { perfmon } for pid=3369 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit[3369]: AVC avc: denied { bpf } for pid=3369 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.340000 audit: BPF prog-id=146 op=LOAD Jul 10 00:23:11.340000 audit[3369]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffce0808d8 a2=40 a3=ffffce080908 items=0 ppid=3262 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.340000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 10 00:23:11.340000 audit: BPF prog-id=146 op=UNLOAD Jul 10 00:23:11.376763 systemd[1]: Removed slice kubepods-besteffort-podd03adf9e_4660_4abe_a04b_c2b850c5a08c.slice. Jul 10 00:23:11.405183 systemd-networkd[1038]: vxlan.calico: Link UP Jul 10 00:23:11.405189 systemd-networkd[1038]: vxlan.calico: Gained carrier Jul 10 00:23:11.428000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.428000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.428000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.428000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.428000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.428000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.428000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.428000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.428000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.428000 audit: BPF prog-id=147 op=LOAD Jul 10 00:23:11.428000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcb172728 a2=98 a3=ffffcb172718 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.428000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.429000 audit: BPF prog-id=147 op=UNLOAD Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit: BPF prog-id=148 op=LOAD Jul 10 00:23:11.429000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcb172408 a2=74 a3=95 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.429000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.429000 audit: BPF prog-id=148 op=UNLOAD Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.429000 audit: BPF prog-id=149 op=LOAD Jul 10 00:23:11.429000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffcb172468 a2=94 a3=2 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.429000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit: BPF prog-id=149 op=UNLOAD Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcb172498 a2=28 a3=ffffcb1725c8 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb1724c8 a2=28 a3=ffffcb1725f8 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb172378 a2=28 a3=ffffcb1724a8 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcb1724e8 a2=28 a3=ffffcb172618 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcb1724c8 a2=28 a3=ffffcb1725f8 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcb1724b8 a2=28 a3=ffffcb1725e8 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcb1724e8 a2=28 a3=ffffcb172618 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb1724c8 a2=28 a3=ffffcb1725f8 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb1724e8 a2=28 a3=ffffcb172618 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffcb1724b8 a2=28 a3=ffffcb1725e8 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffcb172538 a2=28 a3=ffffcb172678 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit: BPF prog-id=150 op=LOAD Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcb172358 a2=40 a3=ffffcb172388 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit: BPF prog-id=150 op=UNLOAD Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffcb172380 a2=50 a3=0 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffcb172380 a2=50 a3=0 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit: BPF prog-id=151 op=LOAD Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcb171ae8 a2=94 a3=2 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.430000 audit: BPF prog-id=151 op=UNLOAD Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { perfmon } for pid=3398 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit[3398]: AVC avc: denied { bpf } for pid=3398 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.430000 audit: BPF prog-id=152 op=LOAD Jul 10 00:23:11.430000 audit[3398]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffcb171c78 a2=94 a3=30 items=0 ppid=3262 pid=3398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.430000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit: BPF prog-id=153 op=LOAD Jul 10 00:23:11.434000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe16954d8 a2=98 a3=ffffe16954c8 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.434000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.434000 audit: BPF prog-id=153 op=UNLOAD Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit: BPF prog-id=154 op=LOAD Jul 10 00:23:11.434000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe1695168 a2=74 a3=95 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.434000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.434000 audit: BPF prog-id=154 op=UNLOAD Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.434000 audit: BPF prog-id=155 op=LOAD Jul 10 00:23:11.434000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe16951c8 a2=94 a3=2 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.434000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.434000 audit: BPF prog-id=155 op=UNLOAD Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit: BPF prog-id=156 op=LOAD Jul 10 00:23:11.520000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffe1695188 a2=40 a3=ffffe16951b8 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.520000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.520000 audit: BPF prog-id=156 op=UNLOAD Jul 10 00:23:11.520000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.520000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffe16952a0 a2=50 a3=0 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.520000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529511 kubelet[1954]: I0710 00:23:11.528920 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe16951f8 a2=28 a3=ffffe1695328 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe1695228 a2=28 a3=ffffe1695358 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe16950d8 a2=28 a3=ffffe1695208 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe1695248 a2=28 a3=ffffe1695378 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe1695228 a2=28 a3=ffffe1695358 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe1695218 a2=28 a3=ffffe1695348 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe1695248 a2=28 a3=ffffe1695378 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe1695228 a2=28 a3=ffffe1695358 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe1695248 a2=28 a3=ffffe1695378 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffe1695218 a2=28 a3=ffffe1695348 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffe1695298 a2=28 a3=ffffe16953d8 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe1694fd0 a2=50 a3=0 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit: BPF prog-id=157 op=LOAD Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffe1694fd8 a2=94 a3=5 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit: BPF prog-id=157 op=UNLOAD Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffe16950e0 a2=50 a3=0 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffe1695228 a2=4 a3=3 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.529000 audit[3407]: AVC avc: denied { confidentiality } for pid=3407 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:23:11.529000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe1695208 a2=94 a3=6 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.529000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { confidentiality } for pid=3407 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:23:11.530000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe16949d8 a2=94 a3=83 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.530000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { perfmon } for pid=3407 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { confidentiality } for pid=3407 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 10 00:23:11.530000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffe16949d8 a2=94 a3=83 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.530000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe1696418 a2=10 a3=ffffe1696508 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.530000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe16962d8 a2=10 a3=ffffe16963c8 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.530000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe1696248 a2=10 a3=ffffe16963c8 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.530000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.530000 audit[3407]: AVC avc: denied { bpf } for pid=3407 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:11.530000 audit[3407]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffe1696248 a2=10 a3=ffffe16963c8 items=0 ppid=3262 pid=3407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.530000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 10 00:23:11.544000 audit: BPF prog-id=152 op=UNLOAD Jul 10 00:23:11.585793 systemd[1]: Created slice kubepods-besteffort-poda90dc05f_2d11_4c04_9921_1865d77fbe30.slice. Jul 10 00:23:11.621000 audit[3430]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3430 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:11.621000 audit[3430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffe9a1e4f0 a2=0 a3=ffffa1b8ffa8 items=0 ppid=3262 pid=3430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.621000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:11.627000 audit[3429]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3429 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:11.627000 audit[3429]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffe294c2c0 a2=0 a3=ffff949bcfa8 items=0 ppid=3262 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.627000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:11.627000 audit[3432]: NETFILTER_CFG table=filter:103 family=2 entries=39 op=nft_register_chain pid=3432 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:11.627000 audit[3432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=ffffc1888bd0 a2=0 a3=ffffa12a5fa8 items=0 ppid=3262 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.627000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:11.631323 kubelet[1954]: I0710 00:23:11.631218 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a90dc05f-2d11-4c04-9921-1865d77fbe30-whisker-ca-bundle\") pod \"whisker-5c7b59c698-s7ddp\" (UID: \"a90dc05f-2d11-4c04-9921-1865d77fbe30\") " pod="calico-system/whisker-5c7b59c698-s7ddp" Jul 10 00:23:11.631323 kubelet[1954]: I0710 00:23:11.631266 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/a90dc05f-2d11-4c04-9921-1865d77fbe30-whisker-backend-key-pair\") pod \"whisker-5c7b59c698-s7ddp\" (UID: \"a90dc05f-2d11-4c04-9921-1865d77fbe30\") " pod="calico-system/whisker-5c7b59c698-s7ddp" Jul 10 00:23:11.631323 kubelet[1954]: I0710 00:23:11.631282 1954 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-6jmm2\" (UniqueName: \"kubernetes.io/projected/a90dc05f-2d11-4c04-9921-1865d77fbe30-kube-api-access-6jmm2\") pod \"whisker-5c7b59c698-s7ddp\" (UID: \"a90dc05f-2d11-4c04-9921-1865d77fbe30\") " pod="calico-system/whisker-5c7b59c698-s7ddp" Jul 10 00:23:11.631000 audit[3428]: NETFILTER_CFG table=raw:104 family=2 entries=21 op=nft_register_chain pid=3428 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:11.631000 audit[3428]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffffbf905e0 a2=0 a3=ffffa429cfa8 items=0 ppid=3262 pid=3428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:11.631000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:11.891054 env[1220]: time="2025-07-10T00:23:11.890934915Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c7b59c698-s7ddp,Uid:a90dc05f-2d11-4c04-9921-1865d77fbe30,Namespace:calico-system,Attempt:0,}" Jul 10 00:23:12.025932 systemd-networkd[1038]: calic09f67bcf66: Link UP Jul 10 00:23:12.027538 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic09f67bcf66: link becomes ready Jul 10 00:23:12.029731 systemd-networkd[1038]: calic09f67bcf66: Gained carrier Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:11.953 [INFO][3439] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--5c7b59c698--s7ddp-eth0 whisker-5c7b59c698- calico-system a90dc05f-2d11-4c04-9921-1865d77fbe30 893 0 2025-07-10 00:23:11 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5c7b59c698 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-5c7b59c698-s7ddp eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calic09f67bcf66 [] [] }} ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Namespace="calico-system" Pod="whisker-5c7b59c698-s7ddp" WorkloadEndpoint="localhost-k8s-whisker--5c7b59c698--s7ddp-" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:11.953 [INFO][3439] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Namespace="calico-system" Pod="whisker-5c7b59c698-s7ddp" WorkloadEndpoint="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:11.980 [INFO][3454] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" HandleID="k8s-pod-network.463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Workload="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:11.980 [INFO][3454] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" HandleID="k8s-pod-network.463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Workload="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000482300), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-5c7b59c698-s7ddp", "timestamp":"2025-07-10 00:23:11.980467647 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:11.980 [INFO][3454] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:11.980 [INFO][3454] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:11.980 [INFO][3454] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:11.997 [INFO][3454] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" host="localhost" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.004 [INFO][3454] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.008 [INFO][3454] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.009 [INFO][3454] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.011 [INFO][3454] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.011 [INFO][3454] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" host="localhost" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.013 [INFO][3454] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.016 [INFO][3454] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" host="localhost" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.022 [INFO][3454] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" host="localhost" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.022 [INFO][3454] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" host="localhost" Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.022 [INFO][3454] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:12.044794 env[1220]: 2025-07-10 00:23:12.022 [INFO][3454] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" HandleID="k8s-pod-network.463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Workload="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" Jul 10 00:23:12.045589 env[1220]: 2025-07-10 00:23:12.024 [INFO][3439] cni-plugin/k8s.go 418: Populated endpoint ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Namespace="calico-system" Pod="whisker-5c7b59c698-s7ddp" WorkloadEndpoint="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5c7b59c698--s7ddp-eth0", GenerateName:"whisker-5c7b59c698-", Namespace:"calico-system", SelfLink:"", UID:"a90dc05f-2d11-4c04-9921-1865d77fbe30", ResourceVersion:"893", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 23, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5c7b59c698", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-5c7b59c698-s7ddp", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calic09f67bcf66", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:12.045589 env[1220]: 2025-07-10 00:23:12.024 [INFO][3439] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Namespace="calico-system" Pod="whisker-5c7b59c698-s7ddp" WorkloadEndpoint="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" Jul 10 00:23:12.045589 env[1220]: 2025-07-10 00:23:12.024 [INFO][3439] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic09f67bcf66 ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Namespace="calico-system" Pod="whisker-5c7b59c698-s7ddp" WorkloadEndpoint="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" Jul 10 00:23:12.045589 env[1220]: 2025-07-10 00:23:12.027 [INFO][3439] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Namespace="calico-system" Pod="whisker-5c7b59c698-s7ddp" WorkloadEndpoint="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" Jul 10 00:23:12.045589 env[1220]: 2025-07-10 00:23:12.027 [INFO][3439] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Namespace="calico-system" Pod="whisker-5c7b59c698-s7ddp" WorkloadEndpoint="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5c7b59c698--s7ddp-eth0", GenerateName:"whisker-5c7b59c698-", Namespace:"calico-system", SelfLink:"", UID:"a90dc05f-2d11-4c04-9921-1865d77fbe30", ResourceVersion:"893", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 23, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5c7b59c698", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b", Pod:"whisker-5c7b59c698-s7ddp", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calic09f67bcf66", MAC:"2e:d7:5c:8b:36:43", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:12.045589 env[1220]: 2025-07-10 00:23:12.042 [INFO][3439] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b" Namespace="calico-system" Pod="whisker-5c7b59c698-s7ddp" WorkloadEndpoint="localhost-k8s-whisker--5c7b59c698--s7ddp-eth0" Jul 10 00:23:12.056291 env[1220]: time="2025-07-10T00:23:12.056215830Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:23:12.056428 env[1220]: time="2025-07-10T00:23:12.056297432Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:23:12.056428 env[1220]: time="2025-07-10T00:23:12.056328194Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:23:12.056712 env[1220]: time="2025-07-10T00:23:12.056618244Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b pid=3482 runtime=io.containerd.runc.v2 Jul 10 00:23:12.068343 systemd[1]: Started cri-containerd-463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b.scope. Jul 10 00:23:12.059000 audit[3483]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3483 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:12.059000 audit[3483]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=35860 a0=3 a1=ffffd79ed1a0 a2=0 a3=ffffaee15fa8 items=0 ppid=3262 pid=3483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:12.059000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.096000 audit: BPF prog-id=158 op=LOAD Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3482 pid=3494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:12.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336635626133356166366134623738303264376636626130316264 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3482 pid=3494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:12.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336635626133356166366134623738303264376636626130316264 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit: BPF prog-id=159 op=LOAD Jul 10 00:23:12.097000 audit[3494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3482 pid=3494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:12.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336635626133356166366134623738303264376636626130316264 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit: BPF prog-id=160 op=LOAD Jul 10 00:23:12.097000 audit[3494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3482 pid=3494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:12.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336635626133356166366134623738303264376636626130316264 Jul 10 00:23:12.097000 audit: BPF prog-id=160 op=UNLOAD Jul 10 00:23:12.097000 audit: BPF prog-id=159 op=UNLOAD Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { perfmon } for pid=3494 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit[3494]: AVC avc: denied { bpf } for pid=3494 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:12.097000 audit: BPF prog-id=161 op=LOAD Jul 10 00:23:12.097000 audit[3494]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3482 pid=3494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:12.097000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3436336635626133356166366134623738303264376636626130316264 Jul 10 00:23:12.099667 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:23:12.115815 env[1220]: time="2025-07-10T00:23:12.115770907Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c7b59c698-s7ddp,Uid:a90dc05f-2d11-4c04-9921-1865d77fbe30,Namespace:calico-system,Attempt:0,} returns sandbox id \"463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b\"" Jul 10 00:23:12.117627 env[1220]: time="2025-07-10T00:23:12.117599091Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 10 00:23:12.780732 systemd-networkd[1038]: vxlan.calico: Gained IPv6LL Jul 10 00:23:13.269861 env[1220]: time="2025-07-10T00:23:13.269799398Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:13.271583 env[1220]: time="2025-07-10T00:23:13.271551577Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:13.272778 env[1220]: time="2025-07-10T00:23:13.272747698Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:13.274074 env[1220]: time="2025-07-10T00:23:13.274042902Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:13.274754 env[1220]: time="2025-07-10T00:23:13.274722045Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 10 00:23:13.278318 env[1220]: time="2025-07-10T00:23:13.278270565Z" level=info msg="CreateContainer within sandbox \"463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 10 00:23:13.291396 env[1220]: time="2025-07-10T00:23:13.291347449Z" level=info msg="CreateContainer within sandbox \"463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"113678e3d9c798a85c74a81e508aea8cfbef8b4c8b4627d8813f73d3abbe5672\"" Jul 10 00:23:13.292212 env[1220]: time="2025-07-10T00:23:13.292179478Z" level=info msg="StartContainer for \"113678e3d9c798a85c74a81e508aea8cfbef8b4c8b4627d8813f73d3abbe5672\"" Jul 10 00:23:13.312566 systemd[1]: Started cri-containerd-113678e3d9c798a85c74a81e508aea8cfbef8b4c8b4627d8813f73d3abbe5672.scope. Jul 10 00:23:13.358541 systemd-networkd[1038]: calic09f67bcf66: Gained IPv6LL Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.374000 audit: BPF prog-id=162 op=LOAD Jul 10 00:23:13.376947 kubelet[1954]: I0710 00:23:13.376262 1954 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="d03adf9e-4660-4abe-a04b-c2b850c5a08c" path="/var/lib/kubelet/pods/d03adf9e-4660-4abe-a04b-c2b850c5a08c/volumes" Jul 10 00:23:13.376947 kubelet[1954]: I0710 00:23:13.376495 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:13.376000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.376000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3482 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:13.376000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131333637386533643963373938613835633734613831653530386165 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3482 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:13.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131333637386533643963373938613835633734613831653530386165 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.377000 audit: BPF prog-id=163 op=LOAD Jul 10 00:23:13.377000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3482 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:13.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131333637386533643963373938613835633734613831653530386165 Jul 10 00:23:13.378000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.378000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.378000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.378000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.378000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.378000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.378000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.378000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.378000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.378000 audit: BPF prog-id=164 op=LOAD Jul 10 00:23:13.378000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3482 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:13.378000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131333637386533643963373938613835633734613831653530386165 Jul 10 00:23:13.379000 audit: BPF prog-id=164 op=UNLOAD Jul 10 00:23:13.379000 audit: BPF prog-id=163 op=UNLOAD Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { perfmon } for pid=3530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit[3530]: AVC avc: denied { bpf } for pid=3530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:13.379000 audit: BPF prog-id=165 op=LOAD Jul 10 00:23:13.379000 audit[3530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3482 pid=3530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:13.379000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3131333637386533643963373938613835633734613831653530386165 Jul 10 00:23:13.407250 env[1220]: time="2025-07-10T00:23:13.407075259Z" level=info msg="StartContainer for \"113678e3d9c798a85c74a81e508aea8cfbef8b4c8b4627d8813f73d3abbe5672\" returns successfully" Jul 10 00:23:13.411211 env[1220]: time="2025-07-10T00:23:13.409202372Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 10 00:23:13.426000 audit[3540]: AVC avc: denied { search } for pid=3540 comm="nginx" name="crypto" dev="proc" ino=19080 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c389 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 10 00:23:13.426000 audit[3540]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff88383958 a2=0 a3=0 items=0 ppid=3482 pid=3540 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c389 key=(null) Jul 10 00:23:13.426000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 10 00:23:14.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.18:22-10.0.0.1:51584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:14.240766 systemd[1]: Started sshd@7-10.0.0.18:22-10.0.0.1:51584.service. Jul 10 00:23:14.279000 audit[3611]: USER_ACCT pid=3611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:14.280325 sshd[3611]: Accepted publickey for core from 10.0.0.1 port 51584 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:14.280000 audit[3611]: CRED_ACQ pid=3611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:14.280000 audit[3611]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffdd9ead0 a2=3 a3=1 items=0 ppid=1 pid=3611 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:14.280000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:14.281678 sshd[3611]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:14.286853 systemd-logind[1210]: New session 8 of user core. Jul 10 00:23:14.288250 systemd[1]: Started session-8.scope. Jul 10 00:23:14.293000 audit[3611]: USER_START pid=3611 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:14.294000 audit[3613]: CRED_ACQ pid=3613 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:14.468210 sshd[3611]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:14.469000 audit[3611]: USER_END pid=3611 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:14.469000 audit[3611]: CRED_DISP pid=3611 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:14.471169 systemd[1]: sshd@7-10.0.0.18:22-10.0.0.1:51584.service: Deactivated successfully. Jul 10 00:23:14.471900 systemd[1]: session-8.scope: Deactivated successfully. Jul 10 00:23:14.470000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.18:22-10.0.0.1:51584 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:14.472535 systemd-logind[1210]: Session 8 logged out. Waiting for processes to exit. Jul 10 00:23:14.473215 systemd-logind[1210]: Removed session 8. Jul 10 00:23:15.214664 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2332211363.mount: Deactivated successfully. Jul 10 00:23:15.244120 env[1220]: time="2025-07-10T00:23:15.244075291Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:15.245384 env[1220]: time="2025-07-10T00:23:15.245331652Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:15.247407 env[1220]: time="2025-07-10T00:23:15.247368757Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:15.249121 env[1220]: time="2025-07-10T00:23:15.249093733Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:15.249636 env[1220]: time="2025-07-10T00:23:15.249608470Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 10 00:23:15.252470 env[1220]: time="2025-07-10T00:23:15.252437641Z" level=info msg="CreateContainer within sandbox \"463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 10 00:23:15.264403 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount512671641.mount: Deactivated successfully. Jul 10 00:23:15.270769 env[1220]: time="2025-07-10T00:23:15.270723511Z" level=info msg="CreateContainer within sandbox \"463f5ba35af6a4b7802d7f6ba01bd2ea97eb2864e5008c5b0a5bb05a31e29b9b\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"2d3a49deb3fbd67cda06cafe9b71ce91e0a8d3fef7434f27cb40c6a79131b12c\"" Jul 10 00:23:15.273105 env[1220]: time="2025-07-10T00:23:15.273074587Z" level=info msg="StartContainer for \"2d3a49deb3fbd67cda06cafe9b71ce91e0a8d3fef7434f27cb40c6a79131b12c\"" Jul 10 00:23:15.295801 systemd[1]: run-containerd-runc-k8s.io-2d3a49deb3fbd67cda06cafe9b71ce91e0a8d3fef7434f27cb40c6a79131b12c-runc.5I7Bf9.mount: Deactivated successfully. Jul 10 00:23:15.298228 systemd[1]: Started cri-containerd-2d3a49deb3fbd67cda06cafe9b71ce91e0a8d3fef7434f27cb40c6a79131b12c.scope. Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit: BPF prog-id=166 op=LOAD Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=3482 pid=3632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:15.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336134396465623366626436376364613036636166653962373163 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=3482 pid=3632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:15.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336134396465623366626436376364613036636166653962373163 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit: BPF prog-id=167 op=LOAD Jul 10 00:23:15.318000 audit[3632]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=3482 pid=3632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:15.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336134396465623366626436376364613036636166653962373163 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.318000 audit: BPF prog-id=168 op=LOAD Jul 10 00:23:15.318000 audit[3632]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=3482 pid=3632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:15.318000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336134396465623366626436376364613036636166653962373163 Jul 10 00:23:15.319000 audit: BPF prog-id=168 op=UNLOAD Jul 10 00:23:15.319000 audit: BPF prog-id=167 op=UNLOAD Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { perfmon } for pid=3632 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit[3632]: AVC avc: denied { bpf } for pid=3632 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:15.319000 audit: BPF prog-id=169 op=LOAD Jul 10 00:23:15.319000 audit[3632]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=3482 pid=3632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:15.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3264336134396465623366626436376364613036636166653962373163 Jul 10 00:23:15.388221 env[1220]: time="2025-07-10T00:23:15.388115821Z" level=info msg="StartContainer for \"2d3a49deb3fbd67cda06cafe9b71ce91e0a8d3fef7434f27cb40c6a79131b12c\" returns successfully" Jul 10 00:23:15.557330 kubelet[1954]: I0710 00:23:15.556944 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-5c7b59c698-s7ddp" podStartSLOduration=1.423325439 podStartE2EDuration="4.556923311s" podCreationTimestamp="2025-07-10 00:23:11 +0000 UTC" firstStartedPulling="2025-07-10 00:23:12.117067432 +0000 UTC m=+36.831870872" lastFinishedPulling="2025-07-10 00:23:15.250665264 +0000 UTC m=+39.965468744" observedRunningTime="2025-07-10 00:23:15.55380165 +0000 UTC m=+40.268605130" watchObservedRunningTime="2025-07-10 00:23:15.556923311 +0000 UTC m=+40.271726751" Jul 10 00:23:15.563000 audit[3663]: NETFILTER_CFG table=filter:106 family=2 entries=19 op=nft_register_rule pid=3663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:15.564642 kernel: kauditd_printk_skb: 784 callbacks suppressed Jul 10 00:23:15.564708 kernel: audit: type=1325 audit(1752106995.563:1183): table=filter:106 family=2 entries=19 op=nft_register_rule pid=3663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:15.563000 audit[3663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc467a2b0 a2=0 a3=1 items=0 ppid=2105 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:15.569003 kernel: audit: type=1300 audit(1752106995.563:1183): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc467a2b0 a2=0 a3=1 items=0 ppid=2105 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:15.569072 kernel: audit: type=1327 audit(1752106995.563:1183): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:15.563000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:15.571000 audit[3663]: NETFILTER_CFG table=nat:107 family=2 entries=21 op=nft_register_chain pid=3663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:15.571000 audit[3663]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffc467a2b0 a2=0 a3=1 items=0 ppid=2105 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:15.576361 kernel: audit: type=1325 audit(1752106995.571:1184): table=nat:107 family=2 entries=21 op=nft_register_chain pid=3663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:15.576416 kernel: audit: type=1300 audit(1752106995.571:1184): arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffc467a2b0 a2=0 a3=1 items=0 ppid=2105 pid=3663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:15.576442 kernel: audit: type=1327 audit(1752106995.571:1184): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:15.571000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:17.369121 env[1220]: time="2025-07-10T00:23:17.369079030Z" level=info msg="StopPodSandbox for \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\"" Jul 10 00:23:17.369879 env[1220]: time="2025-07-10T00:23:17.369853054Z" level=info msg="StopPodSandbox for \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\"" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.414 [INFO][3693] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.414 [INFO][3693] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" iface="eth0" netns="/var/run/netns/cni-4666373d-6507-085f-680a-af1c228ec936" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.414 [INFO][3693] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" iface="eth0" netns="/var/run/netns/cni-4666373d-6507-085f-680a-af1c228ec936" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.418 [INFO][3693] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" iface="eth0" netns="/var/run/netns/cni-4666373d-6507-085f-680a-af1c228ec936" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.418 [INFO][3693] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.418 [INFO][3693] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.452 [INFO][3710] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" HandleID="k8s-pod-network.70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.452 [INFO][3710] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.452 [INFO][3710] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.469 [WARNING][3710] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" HandleID="k8s-pod-network.70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.470 [INFO][3710] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" HandleID="k8s-pod-network.70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.471 [INFO][3710] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:17.478923 env[1220]: 2025-07-10 00:23:17.475 [INFO][3693] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:17.482096 env[1220]: time="2025-07-10T00:23:17.479583474Z" level=info msg="TearDown network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\" successfully" Jul 10 00:23:17.482096 env[1220]: time="2025-07-10T00:23:17.479614075Z" level=info msg="StopPodSandbox for \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\" returns successfully" Jul 10 00:23:17.482096 env[1220]: time="2025-07-10T00:23:17.480194933Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5855c84685-tnkkl,Uid:da818693-d65f-4038-8ac3-0ad75a266860,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:23:17.481041 systemd[1]: run-netns-cni\x2d4666373d\x2d6507\x2d085f\x2d680a\x2daf1c228ec936.mount: Deactivated successfully. Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.428 [INFO][3694] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.429 [INFO][3694] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" iface="eth0" netns="/var/run/netns/cni-1125adff-5367-506d-f288-0588381a551a" Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.429 [INFO][3694] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" iface="eth0" netns="/var/run/netns/cni-1125adff-5367-506d-f288-0588381a551a" Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.429 [INFO][3694] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" iface="eth0" netns="/var/run/netns/cni-1125adff-5367-506d-f288-0588381a551a" Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.429 [INFO][3694] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.429 [INFO][3694] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.463 [INFO][3716] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" HandleID="k8s-pod-network.caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.464 [INFO][3716] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.471 [INFO][3716] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.485 [WARNING][3716] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" HandleID="k8s-pod-network.caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.485 [INFO][3716] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" HandleID="k8s-pod-network.caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.487 [INFO][3716] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:17.491407 env[1220]: 2025-07-10 00:23:17.489 [INFO][3694] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:17.493457 systemd[1]: run-netns-cni\x2d1125adff\x2d5367\x2d506d\x2df288\x2d0588381a551a.mount: Deactivated successfully. Jul 10 00:23:17.494029 env[1220]: time="2025-07-10T00:23:17.493667428Z" level=info msg="TearDown network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\" successfully" Jul 10 00:23:17.494029 env[1220]: time="2025-07-10T00:23:17.493706749Z" level=info msg="StopPodSandbox for \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\" returns successfully" Jul 10 00:23:17.494475 env[1220]: time="2025-07-10T00:23:17.494428571Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5855c84685-w8lqr,Uid:9f425f73-8318-49fa-af06-9948e0e05d64,Namespace:calico-apiserver,Attempt:1,}" Jul 10 00:23:17.624435 systemd-networkd[1038]: calib1f7aac15ca: Link UP Jul 10 00:23:17.626424 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:23:17.626717 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib1f7aac15ca: link becomes ready Jul 10 00:23:17.626042 systemd-networkd[1038]: calib1f7aac15ca: Gained carrier Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.549 [INFO][3726] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0 calico-apiserver-5855c84685- calico-apiserver da818693-d65f-4038-8ac3-0ad75a266860 975 0 2025-07-10 00:22:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5855c84685 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5855c84685-tnkkl eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib1f7aac15ca [] [] }} ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-tnkkl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--tnkkl-" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.549 [INFO][3726] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-tnkkl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.579 [INFO][3756] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" HandleID="k8s-pod-network.62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.579 [INFO][3756] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" HandleID="k8s-pod-network.62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400011bf30), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5855c84685-tnkkl", "timestamp":"2025-07-10 00:23:17.57909866 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.579 [INFO][3756] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.579 [INFO][3756] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.579 [INFO][3756] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.588 [INFO][3756] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" host="localhost" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.595 [INFO][3756] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.601 [INFO][3756] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.603 [INFO][3756] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.605 [INFO][3756] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.605 [INFO][3756] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" host="localhost" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.606 [INFO][3756] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0 Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.613 [INFO][3756] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" host="localhost" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.620 [INFO][3756] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" host="localhost" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.620 [INFO][3756] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" host="localhost" Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.621 [INFO][3756] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:17.639094 env[1220]: 2025-07-10 00:23:17.621 [INFO][3756] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" HandleID="k8s-pod-network.62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.639692 env[1220]: 2025-07-10 00:23:17.623 [INFO][3726] cni-plugin/k8s.go 418: Populated endpoint ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-tnkkl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0", GenerateName:"calico-apiserver-5855c84685-", Namespace:"calico-apiserver", SelfLink:"", UID:"da818693-d65f-4038-8ac3-0ad75a266860", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5855c84685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5855c84685-tnkkl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib1f7aac15ca", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:17.639692 env[1220]: 2025-07-10 00:23:17.623 [INFO][3726] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-tnkkl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.639692 env[1220]: 2025-07-10 00:23:17.623 [INFO][3726] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib1f7aac15ca ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-tnkkl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.639692 env[1220]: 2025-07-10 00:23:17.626 [INFO][3726] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-tnkkl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.639692 env[1220]: 2025-07-10 00:23:17.626 [INFO][3726] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-tnkkl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0", GenerateName:"calico-apiserver-5855c84685-", Namespace:"calico-apiserver", SelfLink:"", UID:"da818693-d65f-4038-8ac3-0ad75a266860", ResourceVersion:"975", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5855c84685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0", Pod:"calico-apiserver-5855c84685-tnkkl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib1f7aac15ca", MAC:"46:ac:44:e0:c9:ba", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:17.639692 env[1220]: 2025-07-10 00:23:17.637 [INFO][3726] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-tnkkl" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:17.648868 env[1220]: time="2025-07-10T00:23:17.648792447Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:23:17.648868 env[1220]: time="2025-07-10T00:23:17.648844329Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:23:17.649072 env[1220]: time="2025-07-10T00:23:17.648855369Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:23:17.649565 env[1220]: time="2025-07-10T00:23:17.649528990Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0 pid=3790 runtime=io.containerd.runc.v2 Jul 10 00:23:17.648000 audit[3793]: NETFILTER_CFG table=filter:108 family=2 entries=50 op=nft_register_chain pid=3793 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:17.648000 audit[3793]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffd33c4130 a2=0 a3=ffffb052efa8 items=0 ppid=3262 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.653881 kernel: audit: type=1325 audit(1752106997.648:1185): table=filter:108 family=2 entries=50 op=nft_register_chain pid=3793 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:17.653977 kernel: audit: type=1300 audit(1752106997.648:1185): arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffd33c4130 a2=0 a3=ffffb052efa8 items=0 ppid=3262 pid=3793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.648000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:17.658694 kernel: audit: type=1327 audit(1752106997.648:1185): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:17.662308 systemd[1]: Started cri-containerd-62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0.scope. Jul 10 00:23:17.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.681000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684587 kernel: audit: type=1400 audit(1752106997.681:1186): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.681000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.683000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.683000 audit: BPF prog-id=170 op=LOAD Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3790 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343530613630636161663065336430363634306239363138636661 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3790 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343530613630636161663065336430363634306239363138636661 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit: BPF prog-id=171 op=LOAD Jul 10 00:23:17.684000 audit[3799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3790 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343530613630636161663065336430363634306239363138636661 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit: BPF prog-id=172 op=LOAD Jul 10 00:23:17.684000 audit[3799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3790 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343530613630636161663065336430363634306239363138636661 Jul 10 00:23:17.684000 audit: BPF prog-id=172 op=UNLOAD Jul 10 00:23:17.684000 audit: BPF prog-id=171 op=UNLOAD Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { perfmon } for pid=3799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit[3799]: AVC avc: denied { bpf } for pid=3799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.684000 audit: BPF prog-id=173 op=LOAD Jul 10 00:23:17.684000 audit[3799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3790 pid=3799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.684000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632343530613630636161663065336430363634306239363138636661 Jul 10 00:23:17.685469 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:23:17.704323 env[1220]: time="2025-07-10T00:23:17.704244316Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5855c84685-tnkkl,Uid:da818693-d65f-4038-8ac3-0ad75a266860,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0\"" Jul 10 00:23:17.706216 env[1220]: time="2025-07-10T00:23:17.706188575Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:23:17.727324 systemd-networkd[1038]: cali528b3b53100: Link UP Jul 10 00:23:17.730371 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali528b3b53100: link becomes ready Jul 10 00:23:17.729736 systemd-networkd[1038]: cali528b3b53100: Gained carrier Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.551 [INFO][3737] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0 calico-apiserver-5855c84685- calico-apiserver 9f425f73-8318-49fa-af06-9948e0e05d64 976 0 2025-07-10 00:22:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:5855c84685 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-5855c84685-w8lqr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali528b3b53100 [] [] }} ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-w8lqr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--w8lqr-" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.552 [INFO][3737] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-w8lqr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.581 [INFO][3755] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" HandleID="k8s-pod-network.4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.581 [INFO][3755] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" HandleID="k8s-pod-network.4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004c760), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-5855c84685-w8lqr", "timestamp":"2025-07-10 00:23:17.581769582 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.582 [INFO][3755] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.621 [INFO][3755] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.621 [INFO][3755] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.689 [INFO][3755] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" host="localhost" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.697 [INFO][3755] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.703 [INFO][3755] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.705 [INFO][3755] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.707 [INFO][3755] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.707 [INFO][3755] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" host="localhost" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.711 [INFO][3755] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131 Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.716 [INFO][3755] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" host="localhost" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.721 [INFO][3755] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" host="localhost" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.721 [INFO][3755] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" host="localhost" Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.721 [INFO][3755] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:17.744472 env[1220]: 2025-07-10 00:23:17.721 [INFO][3755] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" HandleID="k8s-pod-network.4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.745107 env[1220]: 2025-07-10 00:23:17.724 [INFO][3737] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-w8lqr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0", GenerateName:"calico-apiserver-5855c84685-", Namespace:"calico-apiserver", SelfLink:"", UID:"9f425f73-8318-49fa-af06-9948e0e05d64", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5855c84685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-5855c84685-w8lqr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali528b3b53100", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:17.745107 env[1220]: 2025-07-10 00:23:17.725 [INFO][3737] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-w8lqr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.745107 env[1220]: 2025-07-10 00:23:17.725 [INFO][3737] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali528b3b53100 ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-w8lqr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.745107 env[1220]: 2025-07-10 00:23:17.730 [INFO][3737] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-w8lqr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.745107 env[1220]: 2025-07-10 00:23:17.730 [INFO][3737] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-w8lqr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0", GenerateName:"calico-apiserver-5855c84685-", Namespace:"calico-apiserver", SelfLink:"", UID:"9f425f73-8318-49fa-af06-9948e0e05d64", ResourceVersion:"976", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5855c84685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131", Pod:"calico-apiserver-5855c84685-w8lqr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali528b3b53100", MAC:"72:79:de:47:3e:b7", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:17.745107 env[1220]: 2025-07-10 00:23:17.742 [INFO][3737] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131" Namespace="calico-apiserver" Pod="calico-apiserver-5855c84685-w8lqr" WorkloadEndpoint="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:17.751000 audit[3832]: NETFILTER_CFG table=filter:109 family=2 entries=41 op=nft_register_chain pid=3832 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:17.751000 audit[3832]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23076 a0=3 a1=ffffd7c31670 a2=0 a3=ffffbd407fa8 items=0 ppid=3262 pid=3832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.751000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:17.755990 env[1220]: time="2025-07-10T00:23:17.755913307Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:23:17.755990 env[1220]: time="2025-07-10T00:23:17.755956349Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:23:17.755990 env[1220]: time="2025-07-10T00:23:17.755973989Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:23:17.756265 env[1220]: time="2025-07-10T00:23:17.756225237Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131 pid=3840 runtime=io.containerd.runc.v2 Jul 10 00:23:17.766938 systemd[1]: Started cri-containerd-4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131.scope. Jul 10 00:23:17.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.789000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.789000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit: BPF prog-id=174 op=LOAD Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3840 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663533633464336361333663663038353331613562646532656662 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3840 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663533633464336361333663663038353331613562646532656662 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit: BPF prog-id=175 op=LOAD Jul 10 00:23:17.790000 audit[3849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3840 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663533633464336361333663663038353331613562646532656662 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit: BPF prog-id=176 op=LOAD Jul 10 00:23:17.790000 audit[3849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3840 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663533633464336361333663663038353331613562646532656662 Jul 10 00:23:17.790000 audit: BPF prog-id=176 op=UNLOAD Jul 10 00:23:17.790000 audit: BPF prog-id=175 op=UNLOAD Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { perfmon } for pid=3849 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit[3849]: AVC avc: denied { bpf } for pid=3849 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:17.790000 audit: BPF prog-id=177 op=LOAD Jul 10 00:23:17.790000 audit[3849]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3840 pid=3849 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:17.790000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3461663533633464336361333663663038353331613562646532656662 Jul 10 00:23:17.792216 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:23:17.815173 env[1220]: time="2025-07-10T00:23:17.815127932Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-5855c84685-w8lqr,Uid:9f425f73-8318-49fa-af06-9948e0e05d64,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131\"" Jul 10 00:23:18.796707 systemd-networkd[1038]: calib1f7aac15ca: Gained IPv6LL Jul 10 00:23:19.370871 env[1220]: time="2025-07-10T00:23:19.370820832Z" level=info msg="StopPodSandbox for \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\"" Jul 10 00:23:19.371327 env[1220]: time="2025-07-10T00:23:19.371272325Z" level=info msg="StopPodSandbox for \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\"" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.422 [INFO][3891] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.422 [INFO][3891] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" iface="eth0" netns="/var/run/netns/cni-c3b3fbe1-491a-8163-4846-fdf2d2ebe8cc" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.423 [INFO][3891] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" iface="eth0" netns="/var/run/netns/cni-c3b3fbe1-491a-8163-4846-fdf2d2ebe8cc" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.423 [INFO][3891] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" iface="eth0" netns="/var/run/netns/cni-c3b3fbe1-491a-8163-4846-fdf2d2ebe8cc" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.423 [INFO][3891] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.423 [INFO][3891] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.448 [INFO][3910] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" HandleID="k8s-pod-network.e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.448 [INFO][3910] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.448 [INFO][3910] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.458 [WARNING][3910] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" HandleID="k8s-pod-network.e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.458 [INFO][3910] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" HandleID="k8s-pod-network.e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.459 [INFO][3910] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:19.463327 env[1220]: 2025-07-10 00:23:19.461 [INFO][3891] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:19.466183 env[1220]: time="2025-07-10T00:23:19.463471886Z" level=info msg="TearDown network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\" successfully" Jul 10 00:23:19.466183 env[1220]: time="2025-07-10T00:23:19.463502527Z" level=info msg="StopPodSandbox for \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\" returns successfully" Jul 10 00:23:19.465513 systemd[1]: run-netns-cni\x2dc3b3fbe1\x2d491a\x2d8163\x2d4846\x2dfdf2d2ebe8cc.mount: Deactivated successfully. Jul 10 00:23:19.467071 env[1220]: time="2025-07-10T00:23:19.467036871Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-cq5bc,Uid:6e918f70-1421-4e8c-8eef-8816ce28a991,Namespace:calico-system,Attempt:1,}" Jul 10 00:23:19.473820 systemd[1]: Started sshd@8-10.0.0.18:22-10.0.0.1:51594.service. Jul 10 00:23:19.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.18:22-10.0.0.1:51594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.430 [INFO][3896] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.430 [INFO][3896] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" iface="eth0" netns="/var/run/netns/cni-d28c7691-2d89-aa9b-4e03-dbf074d06901" Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.430 [INFO][3896] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" iface="eth0" netns="/var/run/netns/cni-d28c7691-2d89-aa9b-4e03-dbf074d06901" Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.430 [INFO][3896] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" iface="eth0" netns="/var/run/netns/cni-d28c7691-2d89-aa9b-4e03-dbf074d06901" Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.430 [INFO][3896] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.430 [INFO][3896] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.477 [INFO][3917] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" HandleID="k8s-pod-network.20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.477 [INFO][3917] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.477 [INFO][3917] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.491 [WARNING][3917] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" HandleID="k8s-pod-network.20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.492 [INFO][3917] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" HandleID="k8s-pod-network.20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.493 [INFO][3917] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:19.499772 env[1220]: 2025-07-10 00:23:19.495 [INFO][3896] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:19.502012 systemd[1]: run-netns-cni\x2dd28c7691\x2d2d89\x2daa9b\x2d4e03\x2ddbf074d06901.mount: Deactivated successfully. Jul 10 00:23:19.503312 env[1220]: time="2025-07-10T00:23:19.502779606Z" level=info msg="TearDown network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\" successfully" Jul 10 00:23:19.503377 env[1220]: time="2025-07-10T00:23:19.503309902Z" level=info msg="StopPodSandbox for \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\" returns successfully" Jul 10 00:23:19.504952 kubelet[1954]: E0710 00:23:19.503674 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:19.505878 env[1220]: time="2025-07-10T00:23:19.505768775Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-gvm6b,Uid:a6d4bc53-3592-4a6e-b241-bac460e392b6,Namespace:kube-system,Attempt:1,}" Jul 10 00:23:19.521000 audit[3926]: USER_ACCT pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:19.522000 audit[3926]: CRED_ACQ pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:19.522000 audit[3926]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffef9f7e70 a2=3 a3=1 items=0 ppid=1 pid=3926 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.522000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:19.526976 sshd[3926]: Accepted publickey for core from 10.0.0.1 port 51594 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:19.527388 sshd[3926]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:19.531477 systemd-logind[1210]: New session 9 of user core. Jul 10 00:23:19.532596 systemd[1]: Started session-9.scope. Jul 10 00:23:19.543000 audit[3926]: USER_START pid=3926 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:19.544000 audit[3956]: CRED_ACQ pid=3956 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:19.635119 systemd-networkd[1038]: calic2f3923822b: Link UP Jul 10 00:23:19.636700 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 10 00:23:19.636749 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic2f3923822b: link becomes ready Jul 10 00:23:19.636410 systemd-networkd[1038]: calic2f3923822b: Gained carrier Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.545 [INFO][3928] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0 goldmane-768f4c5c69- calico-system 6e918f70-1421-4e8c-8eef-8816ce28a991 1003 0 2025-07-10 00:22:56 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-cq5bc eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] calic2f3923822b [] [] }} ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Namespace="calico-system" Pod="goldmane-768f4c5c69-cq5bc" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cq5bc-" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.545 [INFO][3928] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Namespace="calico-system" Pod="goldmane-768f4c5c69-cq5bc" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.581 [INFO][3958] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" HandleID="k8s-pod-network.4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.581 [INFO][3958] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" HandleID="k8s-pod-network.4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a3720), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-cq5bc", "timestamp":"2025-07-10 00:23:19.580993195 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.581 [INFO][3958] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.581 [INFO][3958] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.581 [INFO][3958] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.595 [INFO][3958] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" host="localhost" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.605 [INFO][3958] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.613 [INFO][3958] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.616 [INFO][3958] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.618 [INFO][3958] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.618 [INFO][3958] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" host="localhost" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.620 [INFO][3958] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8 Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.624 [INFO][3958] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" host="localhost" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.630 [INFO][3958] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" host="localhost" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.630 [INFO][3958] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" host="localhost" Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.630 [INFO][3958] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:19.657927 env[1220]: 2025-07-10 00:23:19.630 [INFO][3958] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" HandleID="k8s-pod-network.4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.658665 env[1220]: 2025-07-10 00:23:19.632 [INFO][3928] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Namespace="calico-system" Pod="goldmane-768f4c5c69-cq5bc" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"6e918f70-1421-4e8c-8eef-8816ce28a991", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-cq5bc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic2f3923822b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:19.658665 env[1220]: 2025-07-10 00:23:19.632 [INFO][3928] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Namespace="calico-system" Pod="goldmane-768f4c5c69-cq5bc" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.658665 env[1220]: 2025-07-10 00:23:19.632 [INFO][3928] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic2f3923822b ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Namespace="calico-system" Pod="goldmane-768f4c5c69-cq5bc" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.658665 env[1220]: 2025-07-10 00:23:19.637 [INFO][3928] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Namespace="calico-system" Pod="goldmane-768f4c5c69-cq5bc" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.658665 env[1220]: 2025-07-10 00:23:19.640 [INFO][3928] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Namespace="calico-system" Pod="goldmane-768f4c5c69-cq5bc" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"6e918f70-1421-4e8c-8eef-8816ce28a991", ResourceVersion:"1003", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8", Pod:"goldmane-768f4c5c69-cq5bc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic2f3923822b", MAC:"6a:5f:dc:7d:74:d5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:19.658665 env[1220]: 2025-07-10 00:23:19.656 [INFO][3928] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8" Namespace="calico-system" Pod="goldmane-768f4c5c69-cq5bc" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:19.671000 audit[3998]: NETFILTER_CFG table=filter:110 family=2 entries=58 op=nft_register_chain pid=3998 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:19.671000 audit[3998]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=30408 a0=3 a1=ffffc258a0c0 a2=0 a3=ffff9aabffa8 items=0 ppid=3262 pid=3998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.671000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:19.748264 systemd-networkd[1038]: cali3773f4c21ab: Link UP Jul 10 00:23:19.748388 systemd-networkd[1038]: cali3773f4c21ab: Gained carrier Jul 10 00:23:19.749665 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3773f4c21ab: link becomes ready Jul 10 00:23:19.759610 sshd[3926]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:19.760000 audit[3926]: USER_END pid=3926 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:19.760000 audit[3926]: CRED_DISP pid=3926 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:19.762408 systemd[1]: sshd@8-10.0.0.18:22-10.0.0.1:51594.service: Deactivated successfully. Jul 10 00:23:19.762000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.18:22-10.0.0.1:51594 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:19.762451 systemd-networkd[1038]: cali528b3b53100: Gained IPv6LL Jul 10 00:23:19.763180 systemd[1]: session-9.scope: Deactivated successfully. Jul 10 00:23:19.763730 systemd-logind[1210]: Session 9 logged out. Waiting for processes to exit. Jul 10 00:23:19.764460 systemd-logind[1210]: Removed session 9. Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.585 [INFO][3943] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0 coredns-668d6bf9bc- kube-system a6d4bc53-3592-4a6e-b241-bac460e392b6 1004 0 2025-07-10 00:22:42 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-gvm6b eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali3773f4c21ab [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Namespace="kube-system" Pod="coredns-668d6bf9bc-gvm6b" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gvm6b-" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.585 [INFO][3943] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Namespace="kube-system" Pod="coredns-668d6bf9bc-gvm6b" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.660 [INFO][3980] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" HandleID="k8s-pod-network.62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.661 [INFO][3980] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" HandleID="k8s-pod-network.62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a2e30), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-gvm6b", "timestamp":"2025-07-10 00:23:19.660882512 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.661 [INFO][3980] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.661 [INFO][3980] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.661 [INFO][3980] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.694 [INFO][3980] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" host="localhost" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.706 [INFO][3980] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.710 [INFO][3980] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.713 [INFO][3980] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.716 [INFO][3980] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.716 [INFO][3980] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" host="localhost" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.721 [INFO][3980] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3 Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.732 [INFO][3980] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" host="localhost" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.742 [INFO][3980] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" host="localhost" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.743 [INFO][3980] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" host="localhost" Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.743 [INFO][3980] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:19.764917 env[1220]: 2025-07-10 00:23:19.743 [INFO][3980] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" HandleID="k8s-pod-network.62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.765459 env[1220]: 2025-07-10 00:23:19.746 [INFO][3943] cni-plugin/k8s.go 418: Populated endpoint ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Namespace="kube-system" Pod="coredns-668d6bf9bc-gvm6b" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a6d4bc53-3592-4a6e-b241-bac460e392b6", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-gvm6b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3773f4c21ab", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:19.765459 env[1220]: 2025-07-10 00:23:19.746 [INFO][3943] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Namespace="kube-system" Pod="coredns-668d6bf9bc-gvm6b" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.765459 env[1220]: 2025-07-10 00:23:19.746 [INFO][3943] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3773f4c21ab ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Namespace="kube-system" Pod="coredns-668d6bf9bc-gvm6b" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.765459 env[1220]: 2025-07-10 00:23:19.748 [INFO][3943] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Namespace="kube-system" Pod="coredns-668d6bf9bc-gvm6b" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.765459 env[1220]: 2025-07-10 00:23:19.748 [INFO][3943] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Namespace="kube-system" Pod="coredns-668d6bf9bc-gvm6b" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a6d4bc53-3592-4a6e-b241-bac460e392b6", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3", Pod:"coredns-668d6bf9bc-gvm6b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3773f4c21ab", MAC:"be:82:ef:c8:17:06", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:19.765459 env[1220]: 2025-07-10 00:23:19.756 [INFO][3943] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3" Namespace="kube-system" Pod="coredns-668d6bf9bc-gvm6b" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:19.770193 env[1220]: time="2025-07-10T00:23:19.769996053Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:23:19.770193 env[1220]: time="2025-07-10T00:23:19.770034294Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:23:19.770193 env[1220]: time="2025-07-10T00:23:19.770045814Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:23:19.771008 env[1220]: time="2025-07-10T00:23:19.770212139Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8 pid=4013 runtime=io.containerd.runc.v2 Jul 10 00:23:19.780000 audit[4033]: NETFILTER_CFG table=filter:111 family=2 entries=50 op=nft_register_chain pid=4033 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:19.780000 audit[4033]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24912 a0=3 a1=ffffd50775e0 a2=0 a3=ffff89795fa8 items=0 ppid=3262 pid=4033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.780000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:19.784944 systemd[1]: Started cri-containerd-4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8.scope. Jul 10 00:23:19.803471 env[1220]: time="2025-07-10T00:23:19.803314516Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:23:19.803471 env[1220]: time="2025-07-10T00:23:19.803355397Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:23:19.803471 env[1220]: time="2025-07-10T00:23:19.803366197Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:23:19.803767 env[1220]: time="2025-07-10T00:23:19.803730488Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3 pid=4051 runtime=io.containerd.runc.v2 Jul 10 00:23:19.827952 systemd[1]: Started cri-containerd-62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3.scope. Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.858000 audit: BPF prog-id=178 op=LOAD Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4051 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632626136373861613439316663646139666364366265656432383939 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4051 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632626136373861613439316663646139666364366265656432383939 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit: BPF prog-id=179 op=LOAD Jul 10 00:23:19.859000 audit[4060]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4051 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632626136373861613439316663646139666364366265656432383939 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit: BPF prog-id=180 op=LOAD Jul 10 00:23:19.859000 audit[4060]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4051 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632626136373861613439316663646139666364366265656432383939 Jul 10 00:23:19.859000 audit: BPF prog-id=180 op=UNLOAD Jul 10 00:23:19.859000 audit: BPF prog-id=179 op=UNLOAD Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { perfmon } for pid=4060 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit[4060]: AVC avc: denied { bpf } for pid=4060 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.859000 audit: BPF prog-id=181 op=LOAD Jul 10 00:23:19.859000 audit[4060]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4051 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.859000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632626136373861613439316663646139666364366265656432383939 Jul 10 00:23:19.860832 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:23:19.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.862000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.862000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.863000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.863000 audit: BPF prog-id=182 op=LOAD Jul 10 00:23:19.863000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.863000 audit[4027]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=4013 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323462356661623961363631666366376337313836333439656537 Jul 10 00:23:19.863000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.863000 audit[4027]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=4013 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323462356661623961363631666366376337313836333439656537 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit: BPF prog-id=183 op=LOAD Jul 10 00:23:19.864000 audit[4027]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=4013 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323462356661623961363631666366376337313836333439656537 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.864000 audit: BPF prog-id=184 op=LOAD Jul 10 00:23:19.864000 audit[4027]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=4013 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323462356661623961363631666366376337313836333439656537 Jul 10 00:23:19.865000 audit: BPF prog-id=184 op=UNLOAD Jul 10 00:23:19.865000 audit: BPF prog-id=183 op=UNLOAD Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { perfmon } for pid=4027 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.865000 audit[4027]: AVC avc: denied { bpf } for pid=4027 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.866810 env[1220]: time="2025-07-10T00:23:19.866714707Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:19.865000 audit: BPF prog-id=185 op=LOAD Jul 10 00:23:19.865000 audit[4027]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=4013 pid=4027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.865000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433323462356661623961363631666366376337313836333439656537 Jul 10 00:23:19.867882 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:23:19.868263 env[1220]: time="2025-07-10T00:23:19.868225152Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:19.872110 env[1220]: time="2025-07-10T00:23:19.872056505Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:19.874173 env[1220]: time="2025-07-10T00:23:19.874134526Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:19.874813 env[1220]: time="2025-07-10T00:23:19.874775905Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 10 00:23:19.879193 env[1220]: time="2025-07-10T00:23:19.877973919Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 10 00:23:19.879193 env[1220]: time="2025-07-10T00:23:19.878612458Z" level=info msg="CreateContainer within sandbox \"62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:23:19.881433 env[1220]: time="2025-07-10T00:23:19.881384860Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-gvm6b,Uid:a6d4bc53-3592-4a6e-b241-bac460e392b6,Namespace:kube-system,Attempt:1,} returns sandbox id \"62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3\"" Jul 10 00:23:19.883586 kubelet[1954]: E0710 00:23:19.883557 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:19.886338 env[1220]: time="2025-07-10T00:23:19.886284805Z" level=info msg="CreateContainer within sandbox \"62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:23:19.901268 env[1220]: time="2025-07-10T00:23:19.901159284Z" level=info msg="CreateContainer within sandbox \"62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"f7d595d5c117a08cb37242c093324e46353f032ea50792243db09f4bed707c5e\"" Jul 10 00:23:19.902595 env[1220]: time="2025-07-10T00:23:19.902557645Z" level=info msg="StartContainer for \"f7d595d5c117a08cb37242c093324e46353f032ea50792243db09f4bed707c5e\"" Jul 10 00:23:19.904884 env[1220]: time="2025-07-10T00:23:19.904729909Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-cq5bc,Uid:6e918f70-1421-4e8c-8eef-8816ce28a991,Namespace:calico-system,Attempt:1,} returns sandbox id \"4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8\"" Jul 10 00:23:19.915273 env[1220]: time="2025-07-10T00:23:19.915213578Z" level=info msg="CreateContainer within sandbox \"62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c1d9a9e33666db479c8a66f47bf33af96f770effb61ccac71bfce46baf4c6d61\"" Jul 10 00:23:19.915750 env[1220]: time="2025-07-10T00:23:19.915685472Z" level=info msg="StartContainer for \"c1d9a9e33666db479c8a66f47bf33af96f770effb61ccac71bfce46baf4c6d61\"" Jul 10 00:23:19.925195 systemd[1]: Started cri-containerd-f7d595d5c117a08cb37242c093324e46353f032ea50792243db09f4bed707c5e.scope. Jul 10 00:23:19.931711 systemd[1]: Started cri-containerd-c1d9a9e33666db479c8a66f47bf33af96f770effb61ccac71bfce46baf4c6d61.scope. Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.965000 audit: BPF prog-id=186 op=LOAD Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3790 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637643539356435633131376130386362333732343263303933333234 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3790 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637643539356435633131376130386362333732343263303933333234 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit: BPF prog-id=187 op=LOAD Jul 10 00:23:19.966000 audit[4099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3790 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637643539356435633131376130386362333732343263303933333234 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit: BPF prog-id=188 op=LOAD Jul 10 00:23:19.966000 audit[4099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3790 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637643539356435633131376130386362333732343263303933333234 Jul 10 00:23:19.966000 audit: BPF prog-id=188 op=UNLOAD Jul 10 00:23:19.966000 audit: BPF prog-id=187 op=UNLOAD Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { perfmon } for pid=4099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit[4099]: AVC avc: denied { bpf } for pid=4099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.966000 audit: BPF prog-id=189 op=LOAD Jul 10 00:23:19.966000 audit[4099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3790 pid=4099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6637643539356435633131376130386362333732343263303933333234 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit: BPF prog-id=190 op=LOAD Jul 10 00:23:19.970000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.970000 audit[4116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4051 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.970000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643961396533333636366462343739633861363666343762663333 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4051 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643961396533333636366462343739633861363666343762663333 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit: BPF prog-id=191 op=LOAD Jul 10 00:23:19.971000 audit[4116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4051 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643961396533333636366462343739633861363666343762663333 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit: BPF prog-id=192 op=LOAD Jul 10 00:23:19.971000 audit[4116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4051 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643961396533333636366462343739633861363666343762663333 Jul 10 00:23:19.971000 audit: BPF prog-id=192 op=UNLOAD Jul 10 00:23:19.971000 audit: BPF prog-id=191 op=UNLOAD Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:19.971000 audit: BPF prog-id=193 op=LOAD Jul 10 00:23:19.971000 audit[4116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4051 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:19.971000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331643961396533333636366462343739633861363666343762663333 Jul 10 00:23:19.988280 env[1220]: time="2025-07-10T00:23:19.988237014Z" level=info msg="StartContainer for \"c1d9a9e33666db479c8a66f47bf33af96f770effb61ccac71bfce46baf4c6d61\" returns successfully" Jul 10 00:23:19.995583 env[1220]: time="2025-07-10T00:23:19.995530749Z" level=info msg="StartContainer for \"f7d595d5c117a08cb37242c093324e46353f032ea50792243db09f4bed707c5e\" returns successfully" Jul 10 00:23:20.057000 audit[4131]: AVC avc: denied { getattr } for pid=4131 comm="coredns" path="cgroup:[4026532380]" dev="nsfs" ino=4026532380 scontext=system_u:system_r:svirt_lxc_net_t:s0:c564,c808 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:23:20.057000 audit[4131]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000148840 a2=40001ce578 a3=0 items=0 ppid=4051 pid=4131 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c564,c808 key=(null) Jul 10 00:23:20.057000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:23:20.107233 env[1220]: time="2025-07-10T00:23:20.107190222Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:20.108616 env[1220]: time="2025-07-10T00:23:20.108588582Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:20.110839 env[1220]: time="2025-07-10T00:23:20.110796326Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:20.112707 env[1220]: time="2025-07-10T00:23:20.112678820Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:20.113063 env[1220]: time="2025-07-10T00:23:20.113033631Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 10 00:23:20.114459 env[1220]: time="2025-07-10T00:23:20.114422711Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 10 00:23:20.116483 env[1220]: time="2025-07-10T00:23:20.116452569Z" level=info msg="CreateContainer within sandbox \"4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 10 00:23:20.126339 env[1220]: time="2025-07-10T00:23:20.126298054Z" level=info msg="CreateContainer within sandbox \"4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"9d1319fa11d1dd4c8b7005f541a8daaafa8bb8d6da77ba2b7a3dc7628557bd20\"" Jul 10 00:23:20.126893 env[1220]: time="2025-07-10T00:23:20.126863551Z" level=info msg="StartContainer for \"9d1319fa11d1dd4c8b7005f541a8daaafa8bb8d6da77ba2b7a3dc7628557bd20\"" Jul 10 00:23:20.160224 systemd[1]: Started cri-containerd-9d1319fa11d1dd4c8b7005f541a8daaafa8bb8d6da77ba2b7a3dc7628557bd20.scope. Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.198000 audit: BPF prog-id=194 op=LOAD Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3840 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964313331396661313164316464346338623730303566353431613864 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3840 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964313331396661313164316464346338623730303566353431613864 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit: BPF prog-id=195 op=LOAD Jul 10 00:23:20.199000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3840 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964313331396661313164316464346338623730303566353431613864 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit: BPF prog-id=196 op=LOAD Jul 10 00:23:20.199000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3840 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964313331396661313164316464346338623730303566353431613864 Jul 10 00:23:20.199000 audit: BPF prog-id=196 op=UNLOAD Jul 10 00:23:20.199000 audit: BPF prog-id=195 op=UNLOAD Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { perfmon } for pid=4178 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit[4178]: AVC avc: denied { bpf } for pid=4178 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.199000 audit: BPF prog-id=197 op=LOAD Jul 10 00:23:20.199000 audit[4178]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3840 pid=4178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.199000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964313331396661313164316464346338623730303566353431613864 Jul 10 00:23:20.273198 env[1220]: time="2025-07-10T00:23:20.273154662Z" level=info msg="StartContainer for \"9d1319fa11d1dd4c8b7005f541a8daaafa8bb8d6da77ba2b7a3dc7628557bd20\" returns successfully" Jul 10 00:23:20.369666 env[1220]: time="2025-07-10T00:23:20.369610252Z" level=info msg="StopPodSandbox for \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\"" Jul 10 00:23:20.370168 env[1220]: time="2025-07-10T00:23:20.369940942Z" level=info msg="StopPodSandbox for \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\"" Jul 10 00:23:20.370333 env[1220]: time="2025-07-10T00:23:20.370030544Z" level=info msg="StopPodSandbox for \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\"" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.461 [INFO][4244] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.461 [INFO][4244] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" iface="eth0" netns="/var/run/netns/cni-4e334fd9-c45a-bb43-933f-8508be4a5e9b" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.463 [INFO][4244] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" iface="eth0" netns="/var/run/netns/cni-4e334fd9-c45a-bb43-933f-8508be4a5e9b" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.463 [INFO][4244] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" iface="eth0" netns="/var/run/netns/cni-4e334fd9-c45a-bb43-933f-8508be4a5e9b" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.463 [INFO][4244] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.463 [INFO][4244] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.506 [INFO][4268] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" HandleID="k8s-pod-network.e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.506 [INFO][4268] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.506 [INFO][4268] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.515 [WARNING][4268] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" HandleID="k8s-pod-network.e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.515 [INFO][4268] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" HandleID="k8s-pod-network.e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.519 [INFO][4268] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:20.527198 env[1220]: 2025-07-10 00:23:20.524 [INFO][4244] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:20.535267 systemd[1]: run-netns-cni\x2d4e334fd9\x2dc45a\x2dbb43\x2d933f\x2d8508be4a5e9b.mount: Deactivated successfully. Jul 10 00:23:20.536572 env[1220]: time="2025-07-10T00:23:20.536502520Z" level=info msg="TearDown network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\" successfully" Jul 10 00:23:20.536721 env[1220]: time="2025-07-10T00:23:20.536699245Z" level=info msg="StopPodSandbox for \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\" returns successfully" Jul 10 00:23:20.537129 kubelet[1954]: E0710 00:23:20.537105 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:20.538789 env[1220]: time="2025-07-10T00:23:20.538756545Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-2h6l7,Uid:8f02d0b0-7a70-46bc-8b53-185546b4a81e,Namespace:kube-system,Attempt:1,}" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.461 [INFO][4243] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.462 [INFO][4243] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" iface="eth0" netns="/var/run/netns/cni-142e6931-81f9-96a6-561a-83e270d49f5b" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.462 [INFO][4243] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" iface="eth0" netns="/var/run/netns/cni-142e6931-81f9-96a6-561a-83e270d49f5b" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.462 [INFO][4243] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" iface="eth0" netns="/var/run/netns/cni-142e6931-81f9-96a6-561a-83e270d49f5b" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.462 [INFO][4243] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.462 [INFO][4243] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.525 [INFO][4266] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" HandleID="k8s-pod-network.6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.525 [INFO][4266] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.526 [INFO][4266] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.543 [WARNING][4266] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" HandleID="k8s-pod-network.6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.544 [INFO][4266] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" HandleID="k8s-pod-network.6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.545 [INFO][4266] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:20.554573 env[1220]: 2025-07-10 00:23:20.552 [INFO][4243] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:20.565611 systemd[1]: run-netns-cni\x2d142e6931\x2d81f9\x2d96a6\x2d561a\x2d83e270d49f5b.mount: Deactivated successfully. Jul 10 00:23:20.567089 env[1220]: time="2025-07-10T00:23:20.567049203Z" level=info msg="TearDown network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\" successfully" Jul 10 00:23:20.567222 env[1220]: time="2025-07-10T00:23:20.567202608Z" level=info msg="StopPodSandbox for \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\" returns successfully" Jul 10 00:23:20.567782 env[1220]: time="2025-07-10T00:23:20.567749143Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-h85xd,Uid:a340f1a4-77e3-476c-904c-86c322c2b72e,Namespace:calico-system,Attempt:1,}" Jul 10 00:23:20.572097 kubelet[1954]: E0710 00:23:20.571806 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.494 [INFO][4245] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.494 [INFO][4245] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" iface="eth0" netns="/var/run/netns/cni-822b57ab-9078-18e6-b5b2-478a2740cd6a" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.494 [INFO][4245] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" iface="eth0" netns="/var/run/netns/cni-822b57ab-9078-18e6-b5b2-478a2740cd6a" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.495 [INFO][4245] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" iface="eth0" netns="/var/run/netns/cni-822b57ab-9078-18e6-b5b2-478a2740cd6a" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.495 [INFO][4245] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.495 [INFO][4245] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.553 [INFO][4280] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" HandleID="k8s-pod-network.a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.553 [INFO][4280] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.553 [INFO][4280] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.567 [WARNING][4280] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" HandleID="k8s-pod-network.a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.568 [INFO][4280] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" HandleID="k8s-pod-network.a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.572 [INFO][4280] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:20.581868 env[1220]: 2025-07-10 00:23:20.578 [INFO][4245] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:20.586503 env[1220]: time="2025-07-10T00:23:20.584543429Z" level=info msg="TearDown network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\" successfully" Jul 10 00:23:20.586503 env[1220]: time="2025-07-10T00:23:20.584578310Z" level=info msg="StopPodSandbox for \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\" returns successfully" Jul 10 00:23:20.586503 env[1220]: time="2025-07-10T00:23:20.585601580Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7796764495-pbp4c,Uid:c56cff78-16c3-42dd-83a4-d757eb25e1b9,Namespace:calico-system,Attempt:1,}" Jul 10 00:23:20.596558 kubelet[1954]: I0710 00:23:20.595277 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5855c84685-tnkkl" podStartSLOduration=26.425082202 podStartE2EDuration="28.595256659s" podCreationTimestamp="2025-07-10 00:22:52 +0000 UTC" firstStartedPulling="2025-07-10 00:23:17.705918007 +0000 UTC m=+42.420721487" lastFinishedPulling="2025-07-10 00:23:19.876092464 +0000 UTC m=+44.590895944" observedRunningTime="2025-07-10 00:23:20.584008894 +0000 UTC m=+45.298812374" watchObservedRunningTime="2025-07-10 00:23:20.595256659 +0000 UTC m=+45.310060099" Jul 10 00:23:20.596558 kubelet[1954]: I0710 00:23:20.595669 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-5855c84685-w8lqr" podStartSLOduration=26.297816136 podStartE2EDuration="28.595663431s" podCreationTimestamp="2025-07-10 00:22:52 +0000 UTC" firstStartedPulling="2025-07-10 00:23:17.816397771 +0000 UTC m=+42.531201251" lastFinishedPulling="2025-07-10 00:23:20.114245066 +0000 UTC m=+44.829048546" observedRunningTime="2025-07-10 00:23:20.594577999 +0000 UTC m=+45.309381479" watchObservedRunningTime="2025-07-10 00:23:20.595663431 +0000 UTC m=+45.310466911" Jul 10 00:23:20.645000 audit[4331]: NETFILTER_CFG table=filter:112 family=2 entries=18 op=nft_register_rule pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:20.649775 kernel: kauditd_printk_skb: 421 callbacks suppressed Jul 10 00:23:20.649880 kernel: audit: type=1325 audit(1752107000.645:1325): table=filter:112 family=2 entries=18 op=nft_register_rule pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:20.645000 audit[4331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffae84d30 a2=0 a3=1 items=0 ppid=2105 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.653093 kernel: audit: type=1300 audit(1752107000.645:1325): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffffae84d30 a2=0 a3=1 items=0 ppid=2105 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.653226 kernel: audit: type=1327 audit(1752107000.645:1325): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:20.645000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:20.657000 audit[4331]: NETFILTER_CFG table=nat:113 family=2 entries=16 op=nft_register_rule pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:20.660541 kernel: audit: type=1325 audit(1752107000.657:1326): table=nat:113 family=2 entries=16 op=nft_register_rule pid=4331 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:20.657000 audit[4331]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=fffffae84d30 a2=0 a3=1 items=0 ppid=2105 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.666581 kernel: audit: type=1300 audit(1752107000.657:1326): arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=fffffae84d30 a2=0 a3=1 items=0 ppid=2105 pid=4331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.657000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:20.670192 kernel: audit: type=1327 audit(1752107000.657:1326): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:20.679000 audit[4339]: NETFILTER_CFG table=filter:114 family=2 entries=15 op=nft_register_rule pid=4339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:20.679000 audit[4339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc3dde150 a2=0 a3=1 items=0 ppid=2105 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.684851 kernel: audit: type=1325 audit(1752107000.679:1327): table=filter:114 family=2 entries=15 op=nft_register_rule pid=4339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:20.684922 kernel: audit: type=1300 audit(1752107000.679:1327): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffc3dde150 a2=0 a3=1 items=0 ppid=2105 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.684946 kernel: audit: type=1327 audit(1752107000.679:1327): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:20.679000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:20.690000 audit[4339]: NETFILTER_CFG table=nat:115 family=2 entries=37 op=nft_register_chain pid=4339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:20.693080 kernel: audit: type=1325 audit(1752107000.690:1328): table=nat:115 family=2 entries=37 op=nft_register_chain pid=4339 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:20.690000 audit[4339]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffc3dde150 a2=0 a3=1 items=0 ppid=2105 pid=4339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.690000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:20.793190 systemd-networkd[1038]: calib7aafcaad3b: Link UP Jul 10 00:23:20.796541 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib7aafcaad3b: link becomes ready Jul 10 00:23:20.797698 systemd-networkd[1038]: calib7aafcaad3b: Gained carrier Jul 10 00:23:20.803383 kubelet[1954]: I0710 00:23:20.803329 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-gvm6b" podStartSLOduration=38.803308717 podStartE2EDuration="38.803308717s" podCreationTimestamp="2025-07-10 00:22:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:23:20.608491562 +0000 UTC m=+45.323295042" watchObservedRunningTime="2025-07-10 00:23:20.803308717 +0000 UTC m=+45.518112157" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.654 [INFO][4295] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0 coredns-668d6bf9bc- kube-system 8f02d0b0-7a70-46bc-8b53-185546b4a81e 1027 0 2025-07-10 00:22:42 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-2h6l7 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calib7aafcaad3b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Namespace="kube-system" Pod="coredns-668d6bf9bc-2h6l7" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2h6l7-" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.654 [INFO][4295] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Namespace="kube-system" Pod="coredns-668d6bf9bc-2h6l7" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.723 [INFO][4333] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" HandleID="k8s-pod-network.0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.724 [INFO][4333] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" HandleID="k8s-pod-network.0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002dd5f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-2h6l7", "timestamp":"2025-07-10 00:23:20.723239841 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.724 [INFO][4333] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.724 [INFO][4333] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.724 [INFO][4333] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.737 [INFO][4333] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" host="localhost" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.744 [INFO][4333] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.755 [INFO][4333] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.759 [INFO][4333] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.761 [INFO][4333] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.762 [INFO][4333] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" host="localhost" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.764 [INFO][4333] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58 Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.776 [INFO][4333] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" host="localhost" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.784 [INFO][4333] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" host="localhost" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.784 [INFO][4333] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" host="localhost" Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.785 [INFO][4333] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:20.808915 env[1220]: 2025-07-10 00:23:20.785 [INFO][4333] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" HandleID="k8s-pod-network.0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.809439 env[1220]: 2025-07-10 00:23:20.791 [INFO][4295] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Namespace="kube-system" Pod="coredns-668d6bf9bc-2h6l7" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"8f02d0b0-7a70-46bc-8b53-185546b4a81e", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-2h6l7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib7aafcaad3b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:20.809439 env[1220]: 2025-07-10 00:23:20.791 [INFO][4295] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Namespace="kube-system" Pod="coredns-668d6bf9bc-2h6l7" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.809439 env[1220]: 2025-07-10 00:23:20.791 [INFO][4295] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib7aafcaad3b ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Namespace="kube-system" Pod="coredns-668d6bf9bc-2h6l7" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.809439 env[1220]: 2025-07-10 00:23:20.793 [INFO][4295] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Namespace="kube-system" Pod="coredns-668d6bf9bc-2h6l7" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.809439 env[1220]: 2025-07-10 00:23:20.793 [INFO][4295] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Namespace="kube-system" Pod="coredns-668d6bf9bc-2h6l7" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"8f02d0b0-7a70-46bc-8b53-185546b4a81e", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58", Pod:"coredns-668d6bf9bc-2h6l7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib7aafcaad3b", MAC:"9e:d5:c3:8a:5e:d0", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:20.809439 env[1220]: 2025-07-10 00:23:20.804 [INFO][4295] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58" Namespace="kube-system" Pod="coredns-668d6bf9bc-2h6l7" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:20.822598 env[1220]: time="2025-07-10T00:23:20.822497112Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:23:20.822777 env[1220]: time="2025-07-10T00:23:20.822751959Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:23:20.822881 env[1220]: time="2025-07-10T00:23:20.822856162Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:23:20.823179 env[1220]: time="2025-07-10T00:23:20.823146931Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58 pid=4382 runtime=io.containerd.runc.v2 Jul 10 00:23:20.828000 audit[4393]: NETFILTER_CFG table=filter:116 family=2 entries=50 op=nft_register_chain pid=4393 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:20.828000 audit[4393]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24368 a0=3 a1=ffffc67d3920 a2=0 a3=ffff8fb3cfa8 items=0 ppid=3262 pid=4393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.828000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:20.837126 systemd[1]: Started cri-containerd-0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58.scope. Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.881000 audit: BPF prog-id=198 op=LOAD Jul 10 00:23:20.882000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.882000 audit[4392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4382 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064373833656462303537303362383337653338633162386361333933 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4382 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064373833656462303537303362383337653338633162386361333933 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit: BPF prog-id=199 op=LOAD Jul 10 00:23:20.883000 audit[4392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4382 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064373833656462303537303362383337653338633162386361333933 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.883000 audit: BPF prog-id=200 op=LOAD Jul 10 00:23:20.883000 audit[4392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4382 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064373833656462303537303362383337653338633162386361333933 Jul 10 00:23:20.884000 audit: BPF prog-id=200 op=UNLOAD Jul 10 00:23:20.884000 audit: BPF prog-id=199 op=UNLOAD Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { perfmon } for pid=4392 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit[4392]: AVC avc: denied { bpf } for pid=4392 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:20.884000 audit: BPF prog-id=201 op=LOAD Jul 10 00:23:20.884000 audit[4392]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4382 pid=4392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.884000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3064373833656462303537303362383337653338633162386361333933 Jul 10 00:23:20.886349 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:23:20.897959 systemd-networkd[1038]: calid2aab89d6a7: Link UP Jul 10 00:23:20.898098 systemd-networkd[1038]: calid2aab89d6a7: Gained carrier Jul 10 00:23:20.899867 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid2aab89d6a7: link becomes ready Jul 10 00:23:20.922080 env[1220]: time="2025-07-10T00:23:20.921904027Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-2h6l7,Uid:8f02d0b0-7a70-46bc-8b53-185546b4a81e,Namespace:kube-system,Attempt:1,} returns sandbox id \"0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58\"" Jul 10 00:23:20.924258 kubelet[1954]: E0710 00:23:20.924214 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:20.932186 env[1220]: time="2025-07-10T00:23:20.932105842Z" level=info msg="CreateContainer within sandbox \"0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.701 [INFO][4302] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--h85xd-eth0 csi-node-driver- calico-system a340f1a4-77e3-476c-904c-86c322c2b72e 1028 0 2025-07-10 00:22:57 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-h85xd eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calid2aab89d6a7 [] [] }} ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Namespace="calico-system" Pod="csi-node-driver-h85xd" WorkloadEndpoint="localhost-k8s-csi--node--driver--h85xd-" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.701 [INFO][4302] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Namespace="calico-system" Pod="csi-node-driver-h85xd" WorkloadEndpoint="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.746 [INFO][4346] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" HandleID="k8s-pod-network.173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.746 [INFO][4346] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" HandleID="k8s-pod-network.173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d250), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-h85xd", "timestamp":"2025-07-10 00:23:20.74635631 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.746 [INFO][4346] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.785 [INFO][4346] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.785 [INFO][4346] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.840 [INFO][4346] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" host="localhost" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.852 [INFO][4346] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.863 [INFO][4346] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.868 [INFO][4346] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.874 [INFO][4346] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.875 [INFO][4346] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" host="localhost" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.878 [INFO][4346] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.882 [INFO][4346] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" host="localhost" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.890 [INFO][4346] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" host="localhost" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.890 [INFO][4346] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" host="localhost" Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.890 [INFO][4346] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:20.939498 env[1220]: 2025-07-10 00:23:20.890 [INFO][4346] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" HandleID="k8s-pod-network.173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.940645 env[1220]: 2025-07-10 00:23:20.892 [INFO][4302] cni-plugin/k8s.go 418: Populated endpoint ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Namespace="calico-system" Pod="csi-node-driver-h85xd" WorkloadEndpoint="localhost-k8s-csi--node--driver--h85xd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--h85xd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a340f1a4-77e3-476c-904c-86c322c2b72e", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-h85xd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calid2aab89d6a7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:20.940645 env[1220]: 2025-07-10 00:23:20.893 [INFO][4302] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Namespace="calico-system" Pod="csi-node-driver-h85xd" WorkloadEndpoint="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.940645 env[1220]: 2025-07-10 00:23:20.893 [INFO][4302] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid2aab89d6a7 ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Namespace="calico-system" Pod="csi-node-driver-h85xd" WorkloadEndpoint="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.940645 env[1220]: 2025-07-10 00:23:20.898 [INFO][4302] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Namespace="calico-system" Pod="csi-node-driver-h85xd" WorkloadEndpoint="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.940645 env[1220]: 2025-07-10 00:23:20.903 [INFO][4302] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Namespace="calico-system" Pod="csi-node-driver-h85xd" WorkloadEndpoint="localhost-k8s-csi--node--driver--h85xd-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--h85xd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a340f1a4-77e3-476c-904c-86c322c2b72e", ResourceVersion:"1028", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde", Pod:"csi-node-driver-h85xd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calid2aab89d6a7", MAC:"72:b4:56:58:9a:c9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:20.940645 env[1220]: 2025-07-10 00:23:20.918 [INFO][4302] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde" Namespace="calico-system" Pod="csi-node-driver-h85xd" WorkloadEndpoint="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:20.955695 env[1220]: time="2025-07-10T00:23:20.955619923Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:23:20.955975 env[1220]: time="2025-07-10T00:23:20.955939132Z" level=info msg="CreateContainer within sandbox \"0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"714031c705c9a8c09a2dc7dcc41f20222e01a553cc852679c17e19df3450c47f\"" Jul 10 00:23:20.956496 env[1220]: time="2025-07-10T00:23:20.956455267Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:23:20.956656 env[1220]: time="2025-07-10T00:23:20.956628112Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:23:20.957176 env[1220]: time="2025-07-10T00:23:20.957123486Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde pid=4431 runtime=io.containerd.runc.v2 Jul 10 00:23:20.956000 audit[4430]: NETFILTER_CFG table=filter:117 family=2 entries=48 op=nft_register_chain pid=4430 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:20.958008 env[1220]: time="2025-07-10T00:23:20.957976991Z" level=info msg="StartContainer for \"714031c705c9a8c09a2dc7dcc41f20222e01a553cc852679c17e19df3450c47f\"" Jul 10 00:23:20.956000 audit[4430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23108 a0=3 a1=ffffc20f3360 a2=0 a3=ffffa799bfa8 items=0 ppid=3262 pid=4430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:20.956000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:21.019813 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4a928d4a5c7: link becomes ready Jul 10 00:23:20.992256 systemd-networkd[1038]: cali4a928d4a5c7: Link UP Jul 10 00:23:20.992396 systemd-networkd[1038]: cali4a928d4a5c7: Gained carrier Jul 10 00:23:21.003529 systemd[1]: Started cri-containerd-173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde.scope. Jul 10 00:23:21.004378 systemd[1]: Started cri-containerd-714031c705c9a8c09a2dc7dcc41f20222e01a553cc852679c17e19df3450c47f.scope. Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.029000 audit: BPF prog-id=202 op=LOAD Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.702 [INFO][4313] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0 calico-kube-controllers-7796764495- calico-system c56cff78-16c3-42dd-83a4-d757eb25e1b9 1029 0 2025-07-10 00:22:57 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:7796764495 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-7796764495-pbp4c eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali4a928d4a5c7 [] [] }} ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Namespace="calico-system" Pod="calico-kube-controllers-7796764495-pbp4c" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.702 [INFO][4313] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Namespace="calico-system" Pod="calico-kube-controllers-7796764495-pbp4c" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.756 [INFO][4352] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" HandleID="k8s-pod-network.68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.756 [INFO][4352] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" HandleID="k8s-pod-network.68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002cb5f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-7796764495-pbp4c", "timestamp":"2025-07-10 00:23:20.756221715 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.756 [INFO][4352] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.892 [INFO][4352] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.892 [INFO][4352] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.938 [INFO][4352] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" host="localhost" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.948 [INFO][4352] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.958 [INFO][4352] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.962 [INFO][4352] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.966 [INFO][4352] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.966 [INFO][4352] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" host="localhost" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.968 [INFO][4352] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307 Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.972 [INFO][4352] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" host="localhost" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.981 [INFO][4352] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" host="localhost" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.981 [INFO][4352] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" host="localhost" Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.981 [INFO][4352] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:21.032953 env[1220]: 2025-07-10 00:23:20.981 [INFO][4352] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" HandleID="k8s-pod-network.68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4431 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137336233393635666331663037313365623561383931323032643938 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4431 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137336233393635666331663037313365623561383931323032643938 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit: BPF prog-id=203 op=LOAD Jul 10 00:23:21.032000 audit[4443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4431 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137336233393635666331663037313365623561383931323032643938 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit: BPF prog-id=204 op=LOAD Jul 10 00:23:21.032000 audit[4443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4431 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137336233393635666331663037313365623561383931323032643938 Jul 10 00:23:21.032000 audit: BPF prog-id=204 op=UNLOAD Jul 10 00:23:21.032000 audit: BPF prog-id=203 op=UNLOAD Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { perfmon } for pid=4443 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit[4443]: AVC avc: denied { bpf } for pid=4443 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.032000 audit: BPF prog-id=205 op=LOAD Jul 10 00:23:21.032000 audit[4443]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4431 pid=4443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.032000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137336233393635666331663037313365623561383931323032643938 Jul 10 00:23:21.035102 env[1220]: 2025-07-10 00:23:20.985 [INFO][4313] cni-plugin/k8s.go 418: Populated endpoint ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Namespace="calico-system" Pod="calico-kube-controllers-7796764495-pbp4c" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0", GenerateName:"calico-kube-controllers-7796764495-", Namespace:"calico-system", SelfLink:"", UID:"c56cff78-16c3-42dd-83a4-d757eb25e1b9", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7796764495", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-7796764495-pbp4c", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4a928d4a5c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:21.035102 env[1220]: 2025-07-10 00:23:20.985 [INFO][4313] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Namespace="calico-system" Pod="calico-kube-controllers-7796764495-pbp4c" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:21.035102 env[1220]: 2025-07-10 00:23:20.985 [INFO][4313] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4a928d4a5c7 ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Namespace="calico-system" Pod="calico-kube-controllers-7796764495-pbp4c" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:21.035102 env[1220]: 2025-07-10 00:23:20.987 [INFO][4313] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Namespace="calico-system" Pod="calico-kube-controllers-7796764495-pbp4c" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:21.035102 env[1220]: 2025-07-10 00:23:20.988 [INFO][4313] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Namespace="calico-system" Pod="calico-kube-controllers-7796764495-pbp4c" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0", GenerateName:"calico-kube-controllers-7796764495-", Namespace:"calico-system", SelfLink:"", UID:"c56cff78-16c3-42dd-83a4-d757eb25e1b9", ResourceVersion:"1029", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7796764495", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307", Pod:"calico-kube-controllers-7796764495-pbp4c", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4a928d4a5c7", MAC:"e2:47:5f:d7:1d:86", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:21.035102 env[1220]: 2025-07-10 00:23:21.011 [INFO][4313] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307" Namespace="calico-system" Pod="calico-kube-controllers-7796764495-pbp4c" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:21.034097 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.047000 audit: BPF prog-id=206 op=LOAD Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4382 pid=4458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343033316337303563396138633039613264633764636334316632 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4382 pid=4458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343033316337303563396138633039613264633764636334316632 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit: BPF prog-id=207 op=LOAD Jul 10 00:23:21.052000 audit[4458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4382 pid=4458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343033316337303563396138633039613264633764636334316632 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.052000 audit: BPF prog-id=208 op=LOAD Jul 10 00:23:21.052000 audit[4458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=19 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4382 pid=4458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343033316337303563396138633039613264633764636334316632 Jul 10 00:23:21.053000 audit: BPF prog-id=208 op=UNLOAD Jul 10 00:23:21.053000 audit: BPF prog-id=207 op=UNLOAD Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { perfmon } for pid=4458 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit[4458]: AVC avc: denied { bpf } for pid=4458 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.054000 audit: BPF prog-id=209 op=LOAD Jul 10 00:23:21.054000 audit[4458]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4382 pid=4458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731343033316337303563396138633039613264633764636334316632 Jul 10 00:23:21.064038 env[1220]: time="2025-07-10T00:23:21.061189823Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 10 00:23:21.064038 env[1220]: time="2025-07-10T00:23:21.061234424Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 10 00:23:21.064038 env[1220]: time="2025-07-10T00:23:21.061247824Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 10 00:23:21.064038 env[1220]: time="2025-07-10T00:23:21.063486648Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307 pid=4505 runtime=io.containerd.runc.v2 Jul 10 00:23:21.062000 audit[4503]: NETFILTER_CFG table=filter:118 family=2 entries=52 op=nft_register_chain pid=4503 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 10 00:23:21.062000 audit[4503]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24296 a0=3 a1=fffff8cdb7b0 a2=0 a3=ffff96bb1fa8 items=0 ppid=3262 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.062000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 10 00:23:21.080749 env[1220]: time="2025-07-10T00:23:21.080694896Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-h85xd,Uid:a340f1a4-77e3-476c-904c-86c322c2b72e,Namespace:calico-system,Attempt:1,} returns sandbox id \"173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde\"" Jul 10 00:23:21.099820 systemd[1]: Started cri-containerd-68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307.scope. Jul 10 00:23:21.108824 env[1220]: time="2025-07-10T00:23:21.108773653Z" level=info msg="StartContainer for \"714031c705c9a8c09a2dc7dcc41f20222e01a553cc852679c17e19df3450c47f\" returns successfully" Jul 10 00:23:21.115000 audit[4482]: AVC avc: denied { getattr } for pid=4482 comm="coredns" path="cgroup:[4026532538]" dev="nsfs" ino=4026532538 scontext=system_u:system_r:svirt_lxc_net_t:s0:c59,c435 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 10 00:23:21.115000 audit[4482]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40000567c8 a2=4000106578 a3=0 items=0 ppid=4382 pid=4482 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c59,c435 key=(null) Jul 10 00:23:21.115000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 10 00:23:21.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.139000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.139000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.140000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.140000 audit: BPF prog-id=210 op=LOAD Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4505 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638616432303739633432393734303937653263643336346365346332 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4505 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638616432303739633432393734303937653263643336346365346332 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit: BPF prog-id=211 op=LOAD Jul 10 00:23:21.142000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4505 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638616432303739633432393734303937653263643336346365346332 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit: BPF prog-id=212 op=LOAD Jul 10 00:23:21.142000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4505 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638616432303739633432393734303937653263643336346365346332 Jul 10 00:23:21.142000 audit: BPF prog-id=212 op=UNLOAD Jul 10 00:23:21.142000 audit: BPF prog-id=211 op=UNLOAD Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { perfmon } for pid=4519 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit[4519]: AVC avc: denied { bpf } for pid=4519 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:21.142000 audit: BPF prog-id=213 op=LOAD Jul 10 00:23:21.142000 audit[4519]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4505 pid=4519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3638616432303739633432393734303937653263643336346365346332 Jul 10 00:23:21.147179 systemd-resolved[1157]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 10 00:23:21.217917 env[1220]: time="2025-07-10T00:23:21.216645514Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-7796764495-pbp4c,Uid:c56cff78-16c3-42dd-83a4-d757eb25e1b9,Namespace:calico-system,Attempt:1,} returns sandbox id \"68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307\"" Jul 10 00:23:21.356682 systemd-networkd[1038]: cali3773f4c21ab: Gained IPv6LL Jul 10 00:23:21.473000 audit[4127]: AVC avc: denied { watch } for pid=4127 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_23_04.1704607630/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c896,c942 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c896,c942 tclass=file permissive=0 Jul 10 00:23:21.473000 audit[4127]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40016bc980 a2=fc6 a3=0 items=0 ppid=3790 pid=4127 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c896,c942 key=(null) Jul 10 00:23:21.473000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:23:21.484766 systemd-networkd[1038]: calic2f3923822b: Gained IPv6LL Jul 10 00:23:21.488825 systemd[1]: run-netns-cni\x2d822b57ab\x2d9078\x2d18e6\x2db5b2\x2d478a2740cd6a.mount: Deactivated successfully. Jul 10 00:23:21.585987 kubelet[1954]: I0710 00:23:21.585232 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:21.585987 kubelet[1954]: E0710 00:23:21.585356 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:21.585987 kubelet[1954]: E0710 00:23:21.585478 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:21.585987 kubelet[1954]: I0710 00:23:21.585650 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:21.649000 audit[4564]: NETFILTER_CFG table=filter:119 family=2 entries=12 op=nft_register_rule pid=4564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:21.649000 audit[4564]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffdc065d40 a2=0 a3=1 items=0 ppid=2105 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.649000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:21.655000 audit[4564]: NETFILTER_CFG table=nat:120 family=2 entries=46 op=nft_register_rule pid=4564 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:21.655000 audit[4564]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffdc065d40 a2=0 a3=1 items=0 ppid=2105 pid=4564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:21.655000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:21.921867 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1690373061.mount: Deactivated successfully. Jul 10 00:23:22.298000 audit[4188]: AVC avc: denied { watch } for pid=4188 comm="apiserver" path="/calico-apiserver-certs/..2025_07_10_00_23_04.2711782306/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c73,c914 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c73,c914 tclass=file permissive=0 Jul 10 00:23:22.298000 audit[4188]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400108afa0 a2=fc6 a3=0 items=0 ppid=3840 pid=4188 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c73,c914 key=(null) Jul 10 00:23:22.298000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 10 00:23:22.316702 systemd-networkd[1038]: calib7aafcaad3b: Gained IPv6LL Jul 10 00:23:22.316981 systemd-networkd[1038]: calid2aab89d6a7: Gained IPv6LL Jul 10 00:23:22.444661 systemd-networkd[1038]: cali4a928d4a5c7: Gained IPv6LL Jul 10 00:23:22.574579 env[1220]: time="2025-07-10T00:23:22.574529466Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:22.576159 env[1220]: time="2025-07-10T00:23:22.576117551Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:22.577733 env[1220]: time="2025-07-10T00:23:22.577700875Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:22.579236 env[1220]: time="2025-07-10T00:23:22.579214077Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:22.579737 env[1220]: time="2025-07-10T00:23:22.579701211Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 10 00:23:22.581647 env[1220]: time="2025-07-10T00:23:22.581613784Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 10 00:23:22.583591 env[1220]: time="2025-07-10T00:23:22.583543878Z" level=info msg="CreateContainer within sandbox \"4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 10 00:23:22.587172 kubelet[1954]: E0710 00:23:22.587136 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:22.587704 kubelet[1954]: E0710 00:23:22.587670 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:22.598003 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1698433291.mount: Deactivated successfully. Jul 10 00:23:22.599397 kubelet[1954]: I0710 00:23:22.599334 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-2h6l7" podStartSLOduration=40.599317797 podStartE2EDuration="40.599317797s" podCreationTimestamp="2025-07-10 00:22:42 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-10 00:23:21.616692905 +0000 UTC m=+46.331496385" watchObservedRunningTime="2025-07-10 00:23:22.599317797 +0000 UTC m=+47.314121277" Jul 10 00:23:22.604871 env[1220]: time="2025-07-10T00:23:22.604817230Z" level=info msg="CreateContainer within sandbox \"4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"65a64d10dff09a5614cac9e095ab1cef014f63c3d11476a389f5d6d60dc316c3\"" Jul 10 00:23:22.607663 env[1220]: time="2025-07-10T00:23:22.607625988Z" level=info msg="StartContainer for \"65a64d10dff09a5614cac9e095ab1cef014f63c3d11476a389f5d6d60dc316c3\"" Jul 10 00:23:22.614000 audit[4573]: NETFILTER_CFG table=filter:121 family=2 entries=12 op=nft_register_rule pid=4573 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:22.614000 audit[4573]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd6232120 a2=0 a3=1 items=0 ppid=2105 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:22.614000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:22.625000 audit[4573]: NETFILTER_CFG table=nat:122 family=2 entries=58 op=nft_register_chain pid=4573 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:22.625000 audit[4573]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffd6232120 a2=0 a3=1 items=0 ppid=2105 pid=4573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:22.625000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:22.636667 systemd[1]: run-containerd-runc-k8s.io-65a64d10dff09a5614cac9e095ab1cef014f63c3d11476a389f5d6d60dc316c3-runc.Eq0gWQ.mount: Deactivated successfully. Jul 10 00:23:22.644686 systemd[1]: Started cri-containerd-65a64d10dff09a5614cac9e095ab1cef014f63c3d11476a389f5d6d60dc316c3.scope. Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.670000 audit: BPF prog-id=214 op=LOAD Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4013 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:22.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635613634643130646666303961353631346361633965303935616231 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4013 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:22.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635613634643130646666303961353631346361633965303935616231 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit: BPF prog-id=215 op=LOAD Jul 10 00:23:22.671000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4013 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:22.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635613634643130646666303961353631346361633965303935616231 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit: BPF prog-id=216 op=LOAD Jul 10 00:23:22.671000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4013 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:22.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635613634643130646666303961353631346361633965303935616231 Jul 10 00:23:22.671000 audit: BPF prog-id=216 op=UNLOAD Jul 10 00:23:22.671000 audit: BPF prog-id=215 op=UNLOAD Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { perfmon } for pid=4574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit[4574]: AVC avc: denied { bpf } for pid=4574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:22.671000 audit: BPF prog-id=217 op=LOAD Jul 10 00:23:22.671000 audit[4574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4013 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:22.671000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3635613634643130646666303961353631346361633965303935616231 Jul 10 00:23:22.734052 env[1220]: time="2025-07-10T00:23:22.733986269Z" level=info msg="StartContainer for \"65a64d10dff09a5614cac9e095ab1cef014f63c3d11476a389f5d6d60dc316c3\" returns successfully" Jul 10 00:23:23.590826 kubelet[1954]: E0710 00:23:23.590800 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:23.615000 audit[4607]: NETFILTER_CFG table=filter:123 family=2 entries=12 op=nft_register_rule pid=4607 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:23.615000 audit[4607]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffe71dede0 a2=0 a3=1 items=0 ppid=2105 pid=4607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:23.615000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:23.620000 audit[4607]: NETFILTER_CFG table=nat:124 family=2 entries=22 op=nft_register_rule pid=4607 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:23.620000 audit[4607]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffe71dede0 a2=0 a3=1 items=0 ppid=2105 pid=4607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:23.620000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:23.718624 env[1220]: time="2025-07-10T00:23:23.718575670Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:23.720935 env[1220]: time="2025-07-10T00:23:23.720902293Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:23.722453 env[1220]: time="2025-07-10T00:23:23.722427735Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:23.723854 env[1220]: time="2025-07-10T00:23:23.723826933Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:23.724356 env[1220]: time="2025-07-10T00:23:23.724330867Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 10 00:23:23.726230 env[1220]: time="2025-07-10T00:23:23.726194078Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 10 00:23:23.727523 env[1220]: time="2025-07-10T00:23:23.727485913Z" level=info msg="CreateContainer within sandbox \"173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 10 00:23:23.739832 env[1220]: time="2025-07-10T00:23:23.739782530Z" level=info msg="CreateContainer within sandbox \"173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"0137405bfaab5c98aea9264d2f2b7fb17523b7412d9322ccadb669951389ab61\"" Jul 10 00:23:23.740850 env[1220]: time="2025-07-10T00:23:23.740793998Z" level=info msg="StartContainer for \"0137405bfaab5c98aea9264d2f2b7fb17523b7412d9322ccadb669951389ab61\"" Jul 10 00:23:23.760318 systemd[1]: Started cri-containerd-0137405bfaab5c98aea9264d2f2b7fb17523b7412d9322ccadb669951389ab61.scope. Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4431 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:23.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031333734303562666161623563393861656139323634643266326237 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit: BPF prog-id=218 op=LOAD Jul 10 00:23:23.781000 audit[4616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4431 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:23.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031333734303562666161623563393861656139323634643266326237 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.781000 audit: BPF prog-id=219 op=LOAD Jul 10 00:23:23.781000 audit[4616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4431 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:23.781000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031333734303562666161623563393861656139323634643266326237 Jul 10 00:23:23.782000 audit: BPF prog-id=219 op=UNLOAD Jul 10 00:23:23.782000 audit: BPF prog-id=218 op=UNLOAD Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { perfmon } for pid=4616 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit[4616]: AVC avc: denied { bpf } for pid=4616 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:23.782000 audit: BPF prog-id=220 op=LOAD Jul 10 00:23:23.782000 audit[4616]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4431 pid=4616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:23.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3031333734303562666161623563393861656139323634643266326237 Jul 10 00:23:23.803723 env[1220]: time="2025-07-10T00:23:23.803662319Z" level=info msg="StartContainer for \"0137405bfaab5c98aea9264d2f2b7fb17523b7412d9322ccadb669951389ab61\" returns successfully" Jul 10 00:23:24.599714 kubelet[1954]: E0710 00:23:24.599586 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:24.764005 systemd[1]: Started sshd@9-10.0.0.18:22-10.0.0.1:39228.service. Jul 10 00:23:24.763000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.18:22-10.0.0.1:39228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:24.808000 audit[4709]: USER_ACCT pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:24.809269 sshd[4709]: Accepted publickey for core from 10.0.0.1 port 39228 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:24.809000 audit[4709]: CRED_ACQ pid=4709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:24.809000 audit[4709]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffefa44e50 a2=3 a3=1 items=0 ppid=1 pid=4709 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:24.809000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:24.811340 sshd[4709]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:24.815439 systemd-logind[1210]: New session 10 of user core. Jul 10 00:23:24.816148 systemd[1]: Started session-10.scope. Jul 10 00:23:24.819000 audit[4709]: USER_START pid=4709 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:24.821000 audit[4711]: CRED_ACQ pid=4711 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.212349 sshd[4709]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:25.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.18:22-10.0.0.1:39244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:25.217169 systemd[1]: Started sshd@10-10.0.0.18:22-10.0.0.1:39244.service. Jul 10 00:23:25.218000 audit[4709]: USER_END pid=4709 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.218000 audit[4709]: CRED_DISP pid=4709 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.221262 systemd[1]: session-10.scope: Deactivated successfully. Jul 10 00:23:25.221815 systemd-logind[1210]: Session 10 logged out. Waiting for processes to exit. Jul 10 00:23:25.221000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.18:22-10.0.0.1:39228 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:25.222312 systemd[1]: sshd@9-10.0.0.18:22-10.0.0.1:39228.service: Deactivated successfully. Jul 10 00:23:25.223347 systemd-logind[1210]: Removed session 10. Jul 10 00:23:25.259000 audit[4722]: USER_ACCT pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.260317 sshd[4722]: Accepted publickey for core from 10.0.0.1 port 39244 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:25.260000 audit[4722]: CRED_ACQ pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.260000 audit[4722]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffea4d5db0 a2=3 a3=1 items=0 ppid=1 pid=4722 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:25.260000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:25.261221 sshd[4722]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:25.265863 systemd-logind[1210]: New session 11 of user core. Jul 10 00:23:25.266349 systemd[1]: Started session-11.scope. Jul 10 00:23:25.271000 audit[4722]: USER_START pid=4722 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.272000 audit[4725]: CRED_ACQ pid=4725 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.490332 sshd[4722]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:25.493000 audit[4722]: USER_END pid=4722 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.493000 audit[4722]: CRED_DISP pid=4722 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.494000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.18:22-10.0.0.1:39260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:25.494826 systemd[1]: Started sshd@11-10.0.0.18:22-10.0.0.1:39260.service. Jul 10 00:23:25.497257 systemd[1]: sshd@10-10.0.0.18:22-10.0.0.1:39244.service: Deactivated successfully. Jul 10 00:23:25.497000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.18:22-10.0.0.1:39244 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:25.498662 systemd[1]: session-11.scope: Deactivated successfully. Jul 10 00:23:25.500177 systemd-logind[1210]: Session 11 logged out. Waiting for processes to exit. Jul 10 00:23:25.501611 systemd-logind[1210]: Removed session 11. Jul 10 00:23:25.553000 audit[4733]: USER_ACCT pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.554438 sshd[4733]: Accepted publickey for core from 10.0.0.1 port 39260 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:25.554000 audit[4733]: CRED_ACQ pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.554000 audit[4733]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc1acc7d0 a2=3 a3=1 items=0 ppid=1 pid=4733 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:25.554000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:25.555777 sshd[4733]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:25.560196 systemd[1]: Started session-12.scope. Jul 10 00:23:25.560499 systemd-logind[1210]: New session 12 of user core. Jul 10 00:23:25.563000 audit[4733]: USER_START pid=4733 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.564000 audit[4736]: CRED_ACQ pid=4736 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.624035 systemd[1]: run-containerd-runc-k8s.io-65a64d10dff09a5614cac9e095ab1cef014f63c3d11476a389f5d6d60dc316c3-runc.zW8rCE.mount: Deactivated successfully. Jul 10 00:23:25.751156 sshd[4733]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:25.756116 kernel: kauditd_printk_skb: 396 callbacks suppressed Jul 10 00:23:25.756219 kernel: audit: type=1106 audit(1752107005.752:1461): pid=4733 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.752000 audit[4733]: USER_END pid=4733 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.756000 audit[4733]: CRED_DISP pid=4733 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.759555 kernel: audit: type=1104 audit(1752107005.756:1462): pid=4733 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:25.760847 systemd[1]: sshd@11-10.0.0.18:22-10.0.0.1:39260.service: Deactivated successfully. Jul 10 00:23:25.760000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.18:22-10.0.0.1:39260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:25.761125 systemd-logind[1210]: Session 12 logged out. Waiting for processes to exit. Jul 10 00:23:25.761621 systemd[1]: session-12.scope: Deactivated successfully. Jul 10 00:23:25.764252 systemd-logind[1210]: Removed session 12. Jul 10 00:23:25.764553 kernel: audit: type=1131 audit(1752107005.760:1463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.18:22-10.0.0.1:39260 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:25.949151 env[1220]: time="2025-07-10T00:23:25.949092599Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:25.951487 env[1220]: time="2025-07-10T00:23:25.951451221Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:25.953365 env[1220]: time="2025-07-10T00:23:25.953325111Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:25.954717 env[1220]: time="2025-07-10T00:23:25.954678307Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:25.955311 env[1220]: time="2025-07-10T00:23:25.955275883Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 10 00:23:25.958932 env[1220]: time="2025-07-10T00:23:25.958891458Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 10 00:23:25.976016 env[1220]: time="2025-07-10T00:23:25.975529019Z" level=info msg="CreateContainer within sandbox \"68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 10 00:23:25.987285 env[1220]: time="2025-07-10T00:23:25.987143407Z" level=info msg="CreateContainer within sandbox \"68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"78ed2fb8d89f9bd33b37e0dfea1cd5a90e327979e1375b9bb075855dbd184b77\"" Jul 10 00:23:25.987782 env[1220]: time="2025-07-10T00:23:25.987737103Z" level=info msg="StartContainer for \"78ed2fb8d89f9bd33b37e0dfea1cd5a90e327979e1375b9bb075855dbd184b77\"" Jul 10 00:23:26.009031 systemd[1]: Started cri-containerd-78ed2fb8d89f9bd33b37e0dfea1cd5a90e327979e1375b9bb075855dbd184b77.scope. Jul 10 00:23:26.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.037361 kernel: audit: type=1400 audit(1752107006.032:1464): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.037393 kernel: audit: type=1400 audit(1752107006.032:1465): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.037411 kernel: audit: type=1400 audit(1752107006.032:1466): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041591 kernel: audit: type=1400 audit(1752107006.032:1467): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041863 kernel: audit: type=1400 audit(1752107006.032:1468): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.045539 kernel: audit: type=1400 audit(1752107006.032:1469): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.045616 kernel: audit: type=1400 audit(1752107006.032:1470): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.032000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.032000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.034000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.034000 audit: BPF prog-id=221 op=LOAD Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4505 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:26.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738656432666238643839663962643333623337653064666561316364 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4505 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:26.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738656432666238643839663962643333623337653064666561316364 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.039000 audit: BPF prog-id=222 op=LOAD Jul 10 00:23:26.039000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4505 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:26.039000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738656432666238643839663962643333623337653064666561316364 Jul 10 00:23:26.041000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.041000 audit: BPF prog-id=223 op=LOAD Jul 10 00:23:26.041000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4505 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:26.041000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738656432666238643839663962643333623337653064666561316364 Jul 10 00:23:26.043000 audit: BPF prog-id=223 op=UNLOAD Jul 10 00:23:26.043000 audit: BPF prog-id=222 op=UNLOAD Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { perfmon } for pid=4774 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit[4774]: AVC avc: denied { bpf } for pid=4774 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:26.043000 audit: BPF prog-id=224 op=LOAD Jul 10 00:23:26.043000 audit[4774]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4505 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:26.043000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738656432666238643839663962643333623337653064666561316364 Jul 10 00:23:26.072485 env[1220]: time="2025-07-10T00:23:26.072086869Z" level=info msg="StartContainer for \"78ed2fb8d89f9bd33b37e0dfea1cd5a90e327979e1375b9bb075855dbd184b77\" returns successfully" Jul 10 00:23:26.620885 kubelet[1954]: I0710 00:23:26.620676 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-cq5bc" podStartSLOduration=27.948876658 podStartE2EDuration="30.620657384s" podCreationTimestamp="2025-07-10 00:22:56 +0000 UTC" firstStartedPulling="2025-07-10 00:23:19.908931433 +0000 UTC m=+44.623734913" lastFinishedPulling="2025-07-10 00:23:22.580712159 +0000 UTC m=+47.295515639" observedRunningTime="2025-07-10 00:23:23.604400424 +0000 UTC m=+48.319203904" watchObservedRunningTime="2025-07-10 00:23:26.620657384 +0000 UTC m=+51.335460824" Jul 10 00:23:27.374740 env[1220]: time="2025-07-10T00:23:27.374686841Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:27.398190 env[1220]: time="2025-07-10T00:23:27.398137604Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:27.400116 env[1220]: time="2025-07-10T00:23:27.400078414Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:27.401393 env[1220]: time="2025-07-10T00:23:27.401364327Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 10 00:23:27.401886 env[1220]: time="2025-07-10T00:23:27.401853020Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 10 00:23:27.404328 env[1220]: time="2025-07-10T00:23:27.404291242Z" level=info msg="CreateContainer within sandbox \"173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 10 00:23:27.422567 env[1220]: time="2025-07-10T00:23:27.422491030Z" level=info msg="CreateContainer within sandbox \"173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"cc1366b34d76269c47036d5a1e18068e0405e84fd17565c3d5c3464d25b063b6\"" Jul 10 00:23:27.423170 env[1220]: time="2025-07-10T00:23:27.423141807Z" level=info msg="StartContainer for \"cc1366b34d76269c47036d5a1e18068e0405e84fd17565c3d5c3464d25b063b6\"" Jul 10 00:23:27.460480 systemd[1]: Started cri-containerd-cc1366b34d76269c47036d5a1e18068e0405e84fd17565c3d5c3464d25b063b6.scope. Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4431 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:27.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363313336366233346437363236396334373033366435613165313830 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit: BPF prog-id=225 op=LOAD Jul 10 00:23:27.483000 audit[4825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4431 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:27.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363313336366233346437363236396334373033366435613165313830 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit: BPF prog-id=226 op=LOAD Jul 10 00:23:27.483000 audit[4825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4431 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:27.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363313336366233346437363236396334373033366435613165313830 Jul 10 00:23:27.483000 audit: BPF prog-id=226 op=UNLOAD Jul 10 00:23:27.483000 audit: BPF prog-id=225 op=UNLOAD Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { perfmon } for pid=4825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit[4825]: AVC avc: denied { bpf } for pid=4825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 10 00:23:27.483000 audit: BPF prog-id=227 op=LOAD Jul 10 00:23:27.483000 audit[4825]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4431 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:27.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6363313336366233346437363236396334373033366435613165313830 Jul 10 00:23:27.497676 env[1220]: time="2025-07-10T00:23:27.497616483Z" level=info msg="StartContainer for \"cc1366b34d76269c47036d5a1e18068e0405e84fd17565c3d5c3464d25b063b6\" returns successfully" Jul 10 00:23:27.611075 kubelet[1954]: I0710 00:23:27.610590 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:27.621685 kubelet[1954]: I0710 00:23:27.621625 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-h85xd" podStartSLOduration=24.304564029 podStartE2EDuration="30.621607792s" podCreationTimestamp="2025-07-10 00:22:57 +0000 UTC" firstStartedPulling="2025-07-10 00:23:21.085928045 +0000 UTC m=+45.800731525" lastFinishedPulling="2025-07-10 00:23:27.402971808 +0000 UTC m=+52.117775288" observedRunningTime="2025-07-10 00:23:27.620910694 +0000 UTC m=+52.335714174" watchObservedRunningTime="2025-07-10 00:23:27.621607792 +0000 UTC m=+52.336411272" Jul 10 00:23:27.622041 kubelet[1954]: I0710 00:23:27.621783 1954 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-7796764495-pbp4c" podStartSLOduration=25.8835236 podStartE2EDuration="30.621777876s" podCreationTimestamp="2025-07-10 00:22:57 +0000 UTC" firstStartedPulling="2025-07-10 00:23:21.218060354 +0000 UTC m=+45.932863794" lastFinishedPulling="2025-07-10 00:23:25.95631459 +0000 UTC m=+50.671118070" observedRunningTime="2025-07-10 00:23:26.621053794 +0000 UTC m=+51.335857274" watchObservedRunningTime="2025-07-10 00:23:27.621777876 +0000 UTC m=+52.336581356" Jul 10 00:23:28.453893 kubelet[1954]: I0710 00:23:28.453857 1954 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 10 00:23:28.454113 kubelet[1954]: I0710 00:23:28.454099 1954 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 10 00:23:30.756000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.18:22-10.0.0.1:39276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:30.756468 systemd[1]: Started sshd@12-10.0.0.18:22-10.0.0.1:39276.service. Jul 10 00:23:30.757585 kernel: kauditd_printk_skb: 93 callbacks suppressed Jul 10 00:23:30.757660 kernel: audit: type=1130 audit(1752107010.756:1488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.18:22-10.0.0.1:39276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:30.797000 audit[4860]: USER_ACCT pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:30.798211 sshd[4860]: Accepted publickey for core from 10.0.0.1 port 39276 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:30.800539 kernel: audit: type=1101 audit(1752107010.797:1489): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:30.801000 audit[4860]: CRED_ACQ pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:30.802230 sshd[4860]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:30.805251 kernel: audit: type=1103 audit(1752107010.801:1490): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:30.805305 kernel: audit: type=1006 audit(1752107010.801:1491): pid=4860 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 10 00:23:30.805347 kernel: audit: type=1300 audit(1752107010.801:1491): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd29ade0 a2=3 a3=1 items=0 ppid=1 pid=4860 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:30.801000 audit[4860]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcd29ade0 a2=3 a3=1 items=0 ppid=1 pid=4860 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:30.805762 systemd-logind[1210]: New session 13 of user core. Jul 10 00:23:30.806604 systemd[1]: Started session-13.scope. Jul 10 00:23:30.801000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:30.808542 kernel: audit: type=1327 audit(1752107010.801:1491): proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:30.809000 audit[4860]: USER_START pid=4860 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:30.811000 audit[4862]: CRED_ACQ pid=4862 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:30.815023 kernel: audit: type=1105 audit(1752107010.809:1492): pid=4860 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:30.815106 kernel: audit: type=1103 audit(1752107010.811:1493): pid=4862 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:31.010053 sshd[4860]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:31.010000 audit[4860]: USER_END pid=4860 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:31.012836 systemd[1]: session-13.scope: Deactivated successfully. Jul 10 00:23:31.013394 systemd-logind[1210]: Session 13 logged out. Waiting for processes to exit. Jul 10 00:23:31.013557 systemd[1]: sshd@12-10.0.0.18:22-10.0.0.1:39276.service: Deactivated successfully. Jul 10 00:23:31.014583 systemd-logind[1210]: Removed session 13. Jul 10 00:23:31.010000 audit[4860]: CRED_DISP pid=4860 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:31.016846 kernel: audit: type=1106 audit(1752107011.010:1494): pid=4860 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:31.016929 kernel: audit: type=1104 audit(1752107011.010:1495): pid=4860 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:31.013000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.18:22-10.0.0.1:39276 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:32.075550 kubelet[1954]: I0710 00:23:32.075373 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:32.090406 systemd[1]: run-containerd-runc-k8s.io-78ed2fb8d89f9bd33b37e0dfea1cd5a90e327979e1375b9bb075855dbd184b77-runc.Tl4bdh.mount: Deactivated successfully. Jul 10 00:23:32.781000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:32.781000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:32.781000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7d a1=40100f8b20 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:23:32.781000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=400e6b5350 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:23:32.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:23:32.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:23:32.781000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:32.781000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7e a1=400ee4d1d0 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:23:32.781000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:23:32.791000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:32.791000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:32.791000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=400e6b53b0 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:23:32.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:23:32.791000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7d a1=400f4049f0 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:23:32.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:23:32.791000 audit[1829]: AVC avc: denied { watch } for pid=1829 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:32.791000 audit[1829]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7c a1=40100f8b60 a2=fc6 a3=0 items=0 ppid=1662 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c409,c714 key=(null) Jul 10 00:23:32.791000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E3138002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E Jul 10 00:23:32.920000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:32.920000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400246e7a0 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:23:32.920000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:23:32.920000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:32.920000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000e7fa70 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:23:32.920000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:23:34.593601 kubelet[1954]: I0710 00:23:34.593503 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:34.632000 audit[4944]: NETFILTER_CFG table=filter:125 family=2 entries=11 op=nft_register_rule pid=4944 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:34.632000 audit[4944]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe2df3cb0 a2=0 a3=1 items=0 ppid=2105 pid=4944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:34.632000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:34.639000 audit[4944]: NETFILTER_CFG table=nat:126 family=2 entries=29 op=nft_register_chain pid=4944 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:34.639000 audit[4944]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffe2df3cb0 a2=0 a3=1 items=0 ppid=2105 pid=4944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:34.639000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:35.357389 env[1220]: time="2025-07-10T00:23:35.357349076Z" level=info msg="StopPodSandbox for \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\"" Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.406 [WARNING][4955] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" WorkloadEndpoint="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.407 [INFO][4955] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.407 [INFO][4955] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" iface="eth0" netns="" Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.407 [INFO][4955] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.407 [INFO][4955] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.435 [INFO][4966] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" HandleID="k8s-pod-network.44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Workload="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.435 [INFO][4966] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.435 [INFO][4966] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.444 [WARNING][4966] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" HandleID="k8s-pod-network.44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Workload="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.444 [INFO][4966] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" HandleID="k8s-pod-network.44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Workload="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.445 [INFO][4966] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:35.449522 env[1220]: 2025-07-10 00:23:35.447 [INFO][4955] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:35.449892 env[1220]: time="2025-07-10T00:23:35.449552359Z" level=info msg="TearDown network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\" successfully" Jul 10 00:23:35.449892 env[1220]: time="2025-07-10T00:23:35.449588240Z" level=info msg="StopPodSandbox for \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\" returns successfully" Jul 10 00:23:35.450250 env[1220]: time="2025-07-10T00:23:35.450223935Z" level=info msg="RemovePodSandbox for \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\"" Jul 10 00:23:35.450300 env[1220]: time="2025-07-10T00:23:35.450260136Z" level=info msg="Forcibly stopping sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\"" Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.482 [WARNING][4984] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" WorkloadEndpoint="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.482 [INFO][4984] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.482 [INFO][4984] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" iface="eth0" netns="" Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.482 [INFO][4984] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.483 [INFO][4984] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.501 [INFO][4993] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" HandleID="k8s-pod-network.44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Workload="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.501 [INFO][4993] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.501 [INFO][4993] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.509 [WARNING][4993] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" HandleID="k8s-pod-network.44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Workload="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.509 [INFO][4993] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" HandleID="k8s-pod-network.44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Workload="localhost-k8s-whisker--65c4dbfd78--fk7px-eth0" Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.513 [INFO][4993] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:35.516581 env[1220]: 2025-07-10 00:23:35.514 [INFO][4984] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f" Jul 10 00:23:35.516985 env[1220]: time="2025-07-10T00:23:35.516625613Z" level=info msg="TearDown network for sandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\" successfully" Jul 10 00:23:35.519925 env[1220]: time="2025-07-10T00:23:35.519892009Z" level=info msg="RemovePodSandbox \"44f88f18474fc9a9157a19eedfa4d4bc57dd86ae4f707f301640cc4e523e8d2f\" returns successfully" Jul 10 00:23:35.520461 env[1220]: time="2025-07-10T00:23:35.520437462Z" level=info msg="StopPodSandbox for \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\"" Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.553 [WARNING][5011] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a6d4bc53-3592-4a6e-b241-bac460e392b6", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3", Pod:"coredns-668d6bf9bc-gvm6b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3773f4c21ab", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.554 [INFO][5011] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.554 [INFO][5011] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" iface="eth0" netns="" Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.554 [INFO][5011] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.554 [INFO][5011] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.579 [INFO][5021] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" HandleID="k8s-pod-network.20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.579 [INFO][5021] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.579 [INFO][5021] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.589 [WARNING][5021] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" HandleID="k8s-pod-network.20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.589 [INFO][5021] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" HandleID="k8s-pod-network.20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.590 [INFO][5021] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:35.594447 env[1220]: 2025-07-10 00:23:35.592 [INFO][5011] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:35.594945 env[1220]: time="2025-07-10T00:23:35.594477119Z" level=info msg="TearDown network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\" successfully" Jul 10 00:23:35.594945 env[1220]: time="2025-07-10T00:23:35.594509320Z" level=info msg="StopPodSandbox for \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\" returns successfully" Jul 10 00:23:35.594945 env[1220]: time="2025-07-10T00:23:35.594917729Z" level=info msg="RemovePodSandbox for \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\"" Jul 10 00:23:35.595026 env[1220]: time="2025-07-10T00:23:35.594948250Z" level=info msg="Forcibly stopping sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\"" Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.628 [WARNING][5039] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"a6d4bc53-3592-4a6e-b241-bac460e392b6", ResourceVersion:"1038", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"62ba678aa491fcda9fcd6beed289972f92100d90376e726fcb067936ea89aef3", Pod:"coredns-668d6bf9bc-gvm6b", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali3773f4c21ab", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.628 [INFO][5039] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.628 [INFO][5039] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" iface="eth0" netns="" Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.628 [INFO][5039] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.628 [INFO][5039] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.645 [INFO][5048] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" HandleID="k8s-pod-network.20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.646 [INFO][5048] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.646 [INFO][5048] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.654 [WARNING][5048] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" HandleID="k8s-pod-network.20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.654 [INFO][5048] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" HandleID="k8s-pod-network.20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Workload="localhost-k8s-coredns--668d6bf9bc--gvm6b-eth0" Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.655 [INFO][5048] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:35.658999 env[1220]: 2025-07-10 00:23:35.657 [INFO][5039] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2" Jul 10 00:23:35.658999 env[1220]: time="2025-07-10T00:23:35.658976272Z" level=info msg="TearDown network for sandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\" successfully" Jul 10 00:23:35.661878 env[1220]: time="2025-07-10T00:23:35.661835019Z" level=info msg="RemovePodSandbox \"20cf164a09930f5baa9154ecc8b001b6c47a66c39971aab5601c46da766468f2\" returns successfully" Jul 10 00:23:35.662321 env[1220]: time="2025-07-10T00:23:35.662291950Z" level=info msg="StopPodSandbox for \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\"" Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.695 [WARNING][5066] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0", GenerateName:"calico-apiserver-5855c84685-", Namespace:"calico-apiserver", SelfLink:"", UID:"9f425f73-8318-49fa-af06-9948e0e05d64", ResourceVersion:"1173", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5855c84685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131", Pod:"calico-apiserver-5855c84685-w8lqr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali528b3b53100", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.695 [INFO][5066] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.695 [INFO][5066] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" iface="eth0" netns="" Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.695 [INFO][5066] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.695 [INFO][5066] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.713 [INFO][5074] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" HandleID="k8s-pod-network.caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.714 [INFO][5074] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.715 [INFO][5074] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.724 [WARNING][5074] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" HandleID="k8s-pod-network.caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.724 [INFO][5074] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" HandleID="k8s-pod-network.caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.726 [INFO][5074] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:35.729759 env[1220]: 2025-07-10 00:23:35.728 [INFO][5066] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:35.730185 env[1220]: time="2025-07-10T00:23:35.729781533Z" level=info msg="TearDown network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\" successfully" Jul 10 00:23:35.730185 env[1220]: time="2025-07-10T00:23:35.729811334Z" level=info msg="StopPodSandbox for \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\" returns successfully" Jul 10 00:23:35.730301 env[1220]: time="2025-07-10T00:23:35.730264825Z" level=info msg="RemovePodSandbox for \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\"" Jul 10 00:23:35.730336 env[1220]: time="2025-07-10T00:23:35.730299705Z" level=info msg="Forcibly stopping sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\"" Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.769 [WARNING][5092] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0", GenerateName:"calico-apiserver-5855c84685-", Namespace:"calico-apiserver", SelfLink:"", UID:"9f425f73-8318-49fa-af06-9948e0e05d64", ResourceVersion:"1173", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5855c84685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4af53c4d3ca36cf08531a5bde2efb202eca32d614a4d1451343df98234558131", Pod:"calico-apiserver-5855c84685-w8lqr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali528b3b53100", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.769 [INFO][5092] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.769 [INFO][5092] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" iface="eth0" netns="" Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.769 [INFO][5092] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.769 [INFO][5092] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.788 [INFO][5102] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" HandleID="k8s-pod-network.caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.788 [INFO][5102] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.789 [INFO][5102] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.806 [WARNING][5102] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" HandleID="k8s-pod-network.caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.806 [INFO][5102] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" HandleID="k8s-pod-network.caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Workload="localhost-k8s-calico--apiserver--5855c84685--w8lqr-eth0" Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.808 [INFO][5102] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:35.812683 env[1220]: 2025-07-10 00:23:35.810 [INFO][5092] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312" Jul 10 00:23:35.813105 env[1220]: time="2025-07-10T00:23:35.812720279Z" level=info msg="TearDown network for sandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\" successfully" Jul 10 00:23:35.817380 env[1220]: time="2025-07-10T00:23:35.817326667Z" level=info msg="RemovePodSandbox \"caee3e917315ec9803c3e8a01f8b16d4ff29fd11e5ca360226f2a3c7f2440312\" returns successfully" Jul 10 00:23:35.817940 env[1220]: time="2025-07-10T00:23:35.817897680Z" level=info msg="StopPodSandbox for \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\"" Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.851 [WARNING][5119] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0", GenerateName:"calico-apiserver-5855c84685-", Namespace:"calico-apiserver", SelfLink:"", UID:"da818693-d65f-4038-8ac3-0ad75a266860", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5855c84685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0", Pod:"calico-apiserver-5855c84685-tnkkl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib1f7aac15ca", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.852 [INFO][5119] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.852 [INFO][5119] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" iface="eth0" netns="" Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.852 [INFO][5119] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.852 [INFO][5119] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.869 [INFO][5128] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" HandleID="k8s-pod-network.70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.869 [INFO][5128] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.869 [INFO][5128] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.878 [WARNING][5128] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" HandleID="k8s-pod-network.70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.878 [INFO][5128] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" HandleID="k8s-pod-network.70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.879 [INFO][5128] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:35.883202 env[1220]: 2025-07-10 00:23:35.881 [INFO][5119] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:35.883645 env[1220]: time="2025-07-10T00:23:35.883238053Z" level=info msg="TearDown network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\" successfully" Jul 10 00:23:35.883645 env[1220]: time="2025-07-10T00:23:35.883268094Z" level=info msg="StopPodSandbox for \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\" returns successfully" Jul 10 00:23:35.883911 env[1220]: time="2025-07-10T00:23:35.883884868Z" level=info msg="RemovePodSandbox for \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\"" Jul 10 00:23:35.884019 env[1220]: time="2025-07-10T00:23:35.883982791Z" level=info msg="Forcibly stopping sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\"" Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.918 [WARNING][5147] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0", GenerateName:"calico-apiserver-5855c84685-", Namespace:"calico-apiserver", SelfLink:"", UID:"da818693-d65f-4038-8ac3-0ad75a266860", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"5855c84685", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"62450a60caaf0e3d06640b9618cfabf22978160863bfcdd7106a6f761951e6a0", Pod:"calico-apiserver-5855c84685-tnkkl", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib1f7aac15ca", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.918 [INFO][5147] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.918 [INFO][5147] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" iface="eth0" netns="" Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.918 [INFO][5147] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.918 [INFO][5147] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.943 [INFO][5156] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" HandleID="k8s-pod-network.70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.943 [INFO][5156] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.943 [INFO][5156] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.952 [WARNING][5156] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" HandleID="k8s-pod-network.70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.952 [INFO][5156] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" HandleID="k8s-pod-network.70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Workload="localhost-k8s-calico--apiserver--5855c84685--tnkkl-eth0" Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.953 [INFO][5156] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:35.957241 env[1220]: 2025-07-10 00:23:35.955 [INFO][5147] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d" Jul 10 00:23:35.958473 env[1220]: time="2025-07-10T00:23:35.957202948Z" level=info msg="TearDown network for sandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\" successfully" Jul 10 00:23:35.962054 env[1220]: time="2025-07-10T00:23:35.962015181Z" level=info msg="RemovePodSandbox \"70d58bb7555801b137944dae367d7a187963730f07bc102062748e676582668d\" returns successfully" Jul 10 00:23:35.962778 env[1220]: time="2025-07-10T00:23:35.962719518Z" level=info msg="StopPodSandbox for \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\"" Jul 10 00:23:36.015052 systemd[1]: Started sshd@13-10.0.0.18:22-10.0.0.1:60290.service. Jul 10 00:23:36.013000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.18:22-10.0.0.1:60290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:36.015979 kernel: kauditd_printk_skb: 31 callbacks suppressed Jul 10 00:23:36.016054 kernel: audit: type=1130 audit(1752107016.013:1507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.18:22-10.0.0.1:60290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.002 [WARNING][5174] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"6e918f70-1421-4e8c-8eef-8816ce28a991", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8", Pod:"goldmane-768f4c5c69-cq5bc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic2f3923822b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.003 [INFO][5174] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.003 [INFO][5174] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" iface="eth0" netns="" Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.003 [INFO][5174] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.003 [INFO][5174] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.026 [INFO][5182] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" HandleID="k8s-pod-network.e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.027 [INFO][5182] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.027 [INFO][5182] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.043 [WARNING][5182] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" HandleID="k8s-pod-network.e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.043 [INFO][5182] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" HandleID="k8s-pod-network.e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.046 [INFO][5182] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:36.050390 env[1220]: 2025-07-10 00:23:36.048 [INFO][5174] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:36.051128 env[1220]: time="2025-07-10T00:23:36.050412444Z" level=info msg="TearDown network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\" successfully" Jul 10 00:23:36.051128 env[1220]: time="2025-07-10T00:23:36.050449605Z" level=info msg="StopPodSandbox for \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\" returns successfully" Jul 10 00:23:36.051128 env[1220]: time="2025-07-10T00:23:36.050917256Z" level=info msg="RemovePodSandbox for \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\"" Jul 10 00:23:36.051128 env[1220]: time="2025-07-10T00:23:36.050951057Z" level=info msg="Forcibly stopping sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\"" Jul 10 00:23:36.054000 audit[5189]: USER_ACCT pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.056475 sshd[5189]: Accepted publickey for core from 10.0.0.1 port 60290 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:36.057757 sshd[5189]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:36.058595 kernel: audit: type=1101 audit(1752107016.054:1508): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.058642 kernel: audit: type=1103 audit(1752107016.055:1509): pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.055000 audit[5189]: CRED_ACQ pid=5189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.061975 kernel: audit: type=1006 audit(1752107016.055:1510): pid=5189 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 10 00:23:36.062030 kernel: audit: type=1300 audit(1752107016.055:1510): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6582350 a2=3 a3=1 items=0 ppid=1 pid=5189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:36.055000 audit[5189]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff6582350 a2=3 a3=1 items=0 ppid=1 pid=5189 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:36.062491 systemd[1]: Started session-14.scope. Jul 10 00:23:36.063102 systemd-logind[1210]: New session 14 of user core. Jul 10 00:23:36.055000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:36.065083 kernel: audit: type=1327 audit(1752107016.055:1510): proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:36.066000 audit[5189]: USER_START pid=5189 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.067000 audit[5208]: CRED_ACQ pid=5208 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.072603 kernel: audit: type=1105 audit(1752107016.066:1511): pid=5189 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.072649 kernel: audit: type=1103 audit(1752107016.067:1512): pid=5208 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.095 [WARNING][5202] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"6e918f70-1421-4e8c-8eef-8816ce28a991", ResourceVersion:"1091", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4324b5fab9a661fcf7c7186349ee7b3e0f5be47945c5b54ae327e0533ae0a8c8", Pod:"goldmane-768f4c5c69-cq5bc", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"calic2f3923822b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.096 [INFO][5202] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.097 [INFO][5202] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" iface="eth0" netns="" Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.097 [INFO][5202] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.097 [INFO][5202] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.121 [INFO][5212] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" HandleID="k8s-pod-network.e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.121 [INFO][5212] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.121 [INFO][5212] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.129 [WARNING][5212] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" HandleID="k8s-pod-network.e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.129 [INFO][5212] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" HandleID="k8s-pod-network.e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Workload="localhost-k8s-goldmane--768f4c5c69--cq5bc-eth0" Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.130 [INFO][5212] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:36.138920 env[1220]: 2025-07-10 00:23:36.132 [INFO][5202] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe" Jul 10 00:23:36.138920 env[1220]: time="2025-07-10T00:23:36.138953983Z" level=info msg="TearDown network for sandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\" successfully" Jul 10 00:23:36.149589 env[1220]: time="2025-07-10T00:23:36.149542349Z" level=info msg="RemovePodSandbox \"e106fab459f7ad868cf128aeaaaf2e329a4aa6cb23bca48e9a2afc7f6f36bafe\" returns successfully" Jul 10 00:23:36.150144 env[1220]: time="2025-07-10T00:23:36.150113402Z" level=info msg="StopPodSandbox for \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\"" Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.202 [WARNING][5239] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0", GenerateName:"calico-kube-controllers-7796764495-", Namespace:"calico-system", SelfLink:"", UID:"c56cff78-16c3-42dd-83a4-d757eb25e1b9", ResourceVersion:"1165", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7796764495", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307", Pod:"calico-kube-controllers-7796764495-pbp4c", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4a928d4a5c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.204 [INFO][5239] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.204 [INFO][5239] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" iface="eth0" netns="" Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.204 [INFO][5239] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.204 [INFO][5239] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.235 [INFO][5247] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" HandleID="k8s-pod-network.a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.235 [INFO][5247] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.235 [INFO][5247] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.244 [WARNING][5247] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" HandleID="k8s-pod-network.a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.244 [INFO][5247] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" HandleID="k8s-pod-network.a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.245 [INFO][5247] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:36.249988 env[1220]: 2025-07-10 00:23:36.248 [INFO][5239] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:36.251446 env[1220]: time="2025-07-10T00:23:36.251238914Z" level=info msg="TearDown network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\" successfully" Jul 10 00:23:36.251584 env[1220]: time="2025-07-10T00:23:36.251562441Z" level=info msg="StopPodSandbox for \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\" returns successfully" Jul 10 00:23:36.252243 env[1220]: time="2025-07-10T00:23:36.252214736Z" level=info msg="RemovePodSandbox for \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\"" Jul 10 00:23:36.252321 env[1220]: time="2025-07-10T00:23:36.252250297Z" level=info msg="Forcibly stopping sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\"" Jul 10 00:23:36.260607 sshd[5189]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:36.260000 audit[5189]: USER_END pid=5189 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.263430 systemd[1]: sshd@13-10.0.0.18:22-10.0.0.1:60290.service: Deactivated successfully. Jul 10 00:23:36.264272 systemd[1]: session-14.scope: Deactivated successfully. Jul 10 00:23:36.260000 audit[5189]: CRED_DISP pid=5189 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.265240 systemd-logind[1210]: Session 14 logged out. Waiting for processes to exit. Jul 10 00:23:36.266128 systemd-logind[1210]: Removed session 14. Jul 10 00:23:36.266677 kernel: audit: type=1106 audit(1752107016.260:1513): pid=5189 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.266763 kernel: audit: type=1104 audit(1752107016.260:1514): pid=5189 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:36.262000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.18:22-10.0.0.1:60290 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.293 [WARNING][5264] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0", GenerateName:"calico-kube-controllers-7796764495-", Namespace:"calico-system", SelfLink:"", UID:"c56cff78-16c3-42dd-83a4-d757eb25e1b9", ResourceVersion:"1165", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"7796764495", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"68ad2079c42974097e2cd364ce4c23e268f6f89328f0f4760f65a2232cf56307", Pod:"calico-kube-controllers-7796764495-pbp4c", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4a928d4a5c7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.293 [INFO][5264] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.293 [INFO][5264] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" iface="eth0" netns="" Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.293 [INFO][5264] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.293 [INFO][5264] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.312 [INFO][5274] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" HandleID="k8s-pod-network.a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.312 [INFO][5274] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.312 [INFO][5274] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.321 [WARNING][5274] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" HandleID="k8s-pod-network.a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.321 [INFO][5274] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" HandleID="k8s-pod-network.a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Workload="localhost-k8s-calico--kube--controllers--7796764495--pbp4c-eth0" Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.322 [INFO][5274] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:36.326201 env[1220]: 2025-07-10 00:23:36.324 [INFO][5264] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f" Jul 10 00:23:36.326647 env[1220]: time="2025-07-10T00:23:36.326230457Z" level=info msg="TearDown network for sandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\" successfully" Jul 10 00:23:36.328896 env[1220]: time="2025-07-10T00:23:36.328863798Z" level=info msg="RemovePodSandbox \"a3d1851457a68cddc0d78e77cb4a509aaa445dbb8b33cd03083dac80eeff181f\" returns successfully" Jul 10 00:23:36.329375 env[1220]: time="2025-07-10T00:23:36.329348650Z" level=info msg="StopPodSandbox for \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\"" Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.363 [WARNING][5292] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--h85xd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a340f1a4-77e3-476c-904c-86c322c2b72e", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde", Pod:"csi-node-driver-h85xd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calid2aab89d6a7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.364 [INFO][5292] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.364 [INFO][5292] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" iface="eth0" netns="" Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.364 [INFO][5292] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.364 [INFO][5292] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.384 [INFO][5301] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" HandleID="k8s-pod-network.6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.384 [INFO][5301] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.384 [INFO][5301] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.394 [WARNING][5301] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" HandleID="k8s-pod-network.6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.395 [INFO][5301] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" HandleID="k8s-pod-network.6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.396 [INFO][5301] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:36.400053 env[1220]: 2025-07-10 00:23:36.398 [INFO][5292] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:36.400804 env[1220]: time="2025-07-10T00:23:36.400767470Z" level=info msg="TearDown network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\" successfully" Jul 10 00:23:36.400868 env[1220]: time="2025-07-10T00:23:36.400851832Z" level=info msg="StopPodSandbox for \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\" returns successfully" Jul 10 00:23:36.401536 env[1220]: time="2025-07-10T00:23:36.401495607Z" level=info msg="RemovePodSandbox for \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\"" Jul 10 00:23:36.401605 env[1220]: time="2025-07-10T00:23:36.401544528Z" level=info msg="Forcibly stopping sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\"" Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.434 [WARNING][5319] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--h85xd-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"a340f1a4-77e3-476c-904c-86c322c2b72e", ResourceVersion:"1142", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"173b3965fc1f0713eb5a891202d98bddd80da20b2c40692150bba2c25a249dde", Pod:"csi-node-driver-h85xd", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calid2aab89d6a7", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.435 [INFO][5319] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.435 [INFO][5319] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" iface="eth0" netns="" Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.435 [INFO][5319] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.435 [INFO][5319] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.452 [INFO][5328] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" HandleID="k8s-pod-network.6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.453 [INFO][5328] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.453 [INFO][5328] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.462 [WARNING][5328] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" HandleID="k8s-pod-network.6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.462 [INFO][5328] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" HandleID="k8s-pod-network.6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Workload="localhost-k8s-csi--node--driver--h85xd-eth0" Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.463 [INFO][5328] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:36.467630 env[1220]: 2025-07-10 00:23:36.465 [INFO][5319] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3" Jul 10 00:23:36.468076 env[1220]: time="2025-07-10T00:23:36.467652985Z" level=info msg="TearDown network for sandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\" successfully" Jul 10 00:23:36.470273 env[1220]: time="2025-07-10T00:23:36.470239005Z" level=info msg="RemovePodSandbox \"6d38668875031138677986cb6f1bdb60850b0f8ee9f4ffb191d75cb59bcf8ab3\" returns successfully" Jul 10 00:23:36.470740 env[1220]: time="2025-07-10T00:23:36.470710256Z" level=info msg="StopPodSandbox for \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\"" Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.502 [WARNING][5346] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"8f02d0b0-7a70-46bc-8b53-185546b4a81e", ResourceVersion:"1077", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58", Pod:"coredns-668d6bf9bc-2h6l7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib7aafcaad3b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.502 [INFO][5346] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.502 [INFO][5346] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" iface="eth0" netns="" Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.503 [INFO][5346] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.503 [INFO][5346] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.521 [INFO][5356] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" HandleID="k8s-pod-network.e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.521 [INFO][5356] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.521 [INFO][5356] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.529 [WARNING][5356] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" HandleID="k8s-pod-network.e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.529 [INFO][5356] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" HandleID="k8s-pod-network.e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.531 [INFO][5356] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:36.535620 env[1220]: 2025-07-10 00:23:36.533 [INFO][5346] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:36.535620 env[1220]: time="2025-07-10T00:23:36.535593525Z" level=info msg="TearDown network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\" successfully" Jul 10 00:23:36.536867 env[1220]: time="2025-07-10T00:23:36.535625805Z" level=info msg="StopPodSandbox for \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\" returns successfully" Jul 10 00:23:36.536867 env[1220]: time="2025-07-10T00:23:36.536427304Z" level=info msg="RemovePodSandbox for \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\"" Jul 10 00:23:36.536867 env[1220]: time="2025-07-10T00:23:36.536462545Z" level=info msg="Forcibly stopping sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\"" Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.578 [WARNING][5373] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"8f02d0b0-7a70-46bc-8b53-185546b4a81e", ResourceVersion:"1077", Generation:0, CreationTimestamp:time.Date(2025, time.July, 10, 0, 22, 42, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0d783edb05703b837e38c1b8ca3932ca84e291740432ca866a38ca136dbb9d58", Pod:"coredns-668d6bf9bc-2h6l7", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calib7aafcaad3b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.579 [INFO][5373] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.579 [INFO][5373] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" iface="eth0" netns="" Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.579 [INFO][5373] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.579 [INFO][5373] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.601 [INFO][5382] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" HandleID="k8s-pod-network.e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.601 [INFO][5382] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.601 [INFO][5382] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.617 [WARNING][5382] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" HandleID="k8s-pod-network.e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.617 [INFO][5382] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" HandleID="k8s-pod-network.e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Workload="localhost-k8s-coredns--668d6bf9bc--2h6l7-eth0" Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.619 [INFO][5382] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 10 00:23:36.624975 env[1220]: 2025-07-10 00:23:36.621 [INFO][5373] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67" Jul 10 00:23:36.625446 env[1220]: time="2025-07-10T00:23:36.625014524Z" level=info msg="TearDown network for sandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\" successfully" Jul 10 00:23:36.628759 env[1220]: time="2025-07-10T00:23:36.628726890Z" level=info msg="RemovePodSandbox \"e06f31f3d72ff13ffda8c038195b277ea209bc1134ff47fbb26dedf65798aa67\" returns successfully" Jul 10 00:23:37.387361 kubelet[1954]: I0710 00:23:37.387320 1954 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 10 00:23:37.420000 audit[5412]: NETFILTER_CFG table=filter:127 family=2 entries=10 op=nft_register_rule pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:37.420000 audit[5412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd6d1e8c0 a2=0 a3=1 items=0 ppid=2105 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:37.420000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:37.440000 audit[5412]: NETFILTER_CFG table=nat:128 family=2 entries=36 op=nft_register_chain pid=5412 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:37.440000 audit[5412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffd6d1e8c0 a2=0 a3=1 items=0 ppid=2105 pid=5412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:37.440000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:40.013000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:40.013000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:40.013000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002986ae0 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:23:40.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:23:40.013000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40011f3800 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:23:40.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:23:40.013000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:40.013000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400246faa0 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:23:40.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:23:40.013000 audit[1841]: AVC avc: denied { watch } for pid=1841 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 10 00:23:40.013000 audit[1841]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40011f3820 a2=fc6 a3=0 items=0 ppid=1670 pid=1841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c196,c412 key=(null) Jul 10 00:23:40.013000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 10 00:23:41.263092 systemd[1]: Started sshd@14-10.0.0.18:22-10.0.0.1:60298.service. Jul 10 00:23:41.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.18:22-10.0.0.1:60298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:41.266237 kernel: kauditd_printk_skb: 19 callbacks suppressed Jul 10 00:23:41.266384 kernel: audit: type=1130 audit(1752107021.261:1522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.18:22-10.0.0.1:60298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:41.304000 audit[5416]: USER_ACCT pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.306730 sshd[5416]: Accepted publickey for core from 10.0.0.1 port 60298 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:41.308246 sshd[5416]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:41.306000 audit[5416]: CRED_ACQ pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.311136 kernel: audit: type=1101 audit(1752107021.304:1523): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.311177 kernel: audit: type=1103 audit(1752107021.306:1524): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.311210 kernel: audit: type=1006 audit(1752107021.306:1525): pid=5416 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 10 00:23:41.312554 kernel: audit: type=1300 audit(1752107021.306:1525): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed24cc50 a2=3 a3=1 items=0 ppid=1 pid=5416 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:41.306000 audit[5416]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed24cc50 a2=3 a3=1 items=0 ppid=1 pid=5416 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:41.314977 kernel: audit: type=1327 audit(1752107021.306:1525): proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:41.306000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:41.315228 systemd-logind[1210]: New session 15 of user core. Jul 10 00:23:41.316051 systemd[1]: Started session-15.scope. Jul 10 00:23:41.318000 audit[5416]: USER_START pid=5416 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.319000 audit[5418]: CRED_ACQ pid=5418 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.324398 kernel: audit: type=1105 audit(1752107021.318:1526): pid=5416 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.324458 kernel: audit: type=1103 audit(1752107021.319:1527): pid=5418 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.477109 sshd[5416]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:41.477000 audit[5416]: USER_END pid=5416 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.481005 systemd[1]: sshd@14-10.0.0.18:22-10.0.0.1:60298.service: Deactivated successfully. Jul 10 00:23:41.481921 systemd[1]: session-15.scope: Deactivated successfully. Jul 10 00:23:41.477000 audit[5416]: CRED_DISP pid=5416 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.482706 systemd-logind[1210]: Session 15 logged out. Waiting for processes to exit. Jul 10 00:23:41.484027 systemd-logind[1210]: Removed session 15. Jul 10 00:23:41.484296 kernel: audit: type=1106 audit(1752107021.477:1528): pid=5416 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.484335 kernel: audit: type=1104 audit(1752107021.477:1529): pid=5416 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:41.479000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.18:22-10.0.0.1:60298 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:43.494639 systemd[1]: run-containerd-runc-k8s.io-6ad741e94fbc2638a307e4988ae36e034eec79ff84832193c60382b3d696a912-runc.MnOwde.mount: Deactivated successfully. Jul 10 00:23:46.479921 systemd[1]: Started sshd@15-10.0.0.18:22-10.0.0.1:33148.service. Jul 10 00:23:46.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.18:22-10.0.0.1:33148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:46.480970 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:23:46.481024 kernel: audit: type=1130 audit(1752107026.478:1531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.18:22-10.0.0.1:33148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:46.520000 audit[5455]: USER_ACCT pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.522590 sshd[5455]: Accepted publickey for core from 10.0.0.1 port 33148 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:46.524397 sshd[5455]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:46.522000 audit[5455]: CRED_ACQ pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.527185 kernel: audit: type=1101 audit(1752107026.520:1532): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.527250 kernel: audit: type=1103 audit(1752107026.522:1533): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.527268 kernel: audit: type=1006 audit(1752107026.522:1534): pid=5455 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 10 00:23:46.528464 kernel: audit: type=1300 audit(1752107026.522:1534): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc977e590 a2=3 a3=1 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:46.522000 audit[5455]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc977e590 a2=3 a3=1 items=0 ppid=1 pid=5455 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:46.528300 systemd-logind[1210]: New session 16 of user core. Jul 10 00:23:46.528783 systemd[1]: Started session-16.scope. Jul 10 00:23:46.522000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:46.531982 kernel: audit: type=1327 audit(1752107026.522:1534): proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:46.531000 audit[5455]: USER_START pid=5455 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.532000 audit[5457]: CRED_ACQ pid=5457 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.537698 kernel: audit: type=1105 audit(1752107026.531:1535): pid=5455 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.537752 kernel: audit: type=1103 audit(1752107026.532:1536): pid=5457 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.676872 sshd[5455]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:46.676000 audit[5455]: USER_END pid=5455 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.676000 audit[5455]: CRED_DISP pid=5455 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.680905 systemd[1]: Started sshd@16-10.0.0.18:22-10.0.0.1:33154.service. Jul 10 00:23:46.681649 systemd[1]: sshd@15-10.0.0.18:22-10.0.0.1:33148.service: Deactivated successfully. Jul 10 00:23:46.682757 kernel: audit: type=1106 audit(1752107026.676:1537): pid=5455 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.682843 kernel: audit: type=1104 audit(1752107026.676:1538): pid=5455 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.18:22-10.0.0.1:33154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:46.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.18:22-10.0.0.1:33148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:46.683550 systemd[1]: session-16.scope: Deactivated successfully. Jul 10 00:23:46.684629 systemd-logind[1210]: Session 16 logged out. Waiting for processes to exit. Jul 10 00:23:46.685676 systemd-logind[1210]: Removed session 16. Jul 10 00:23:46.718000 audit[5467]: USER_ACCT pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.720381 sshd[5467]: Accepted publickey for core from 10.0.0.1 port 33154 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:46.720000 audit[5467]: CRED_ACQ pid=5467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.720000 audit[5467]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd662d860 a2=3 a3=1 items=0 ppid=1 pid=5467 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:46.720000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:46.722103 sshd[5467]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:46.727823 systemd[1]: Started session-17.scope. Jul 10 00:23:46.727994 systemd-logind[1210]: New session 17 of user core. Jul 10 00:23:46.731000 audit[5467]: USER_START pid=5467 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.732000 audit[5470]: CRED_ACQ pid=5470 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.942290 sshd[5467]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:46.942000 audit[5467]: USER_END pid=5467 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.942000 audit[5467]: CRED_DISP pid=5467 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.946404 systemd[1]: Started sshd@17-10.0.0.18:22-10.0.0.1:33170.service. Jul 10 00:23:46.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.18:22-10.0.0.1:33170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:46.950594 systemd[1]: session-17.scope: Deactivated successfully. Jul 10 00:23:46.950595 systemd-logind[1210]: Session 17 logged out. Waiting for processes to exit. Jul 10 00:23:46.951753 systemd[1]: sshd@16-10.0.0.18:22-10.0.0.1:33154.service: Deactivated successfully. Jul 10 00:23:46.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.18:22-10.0.0.1:33154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:46.952684 systemd-logind[1210]: Removed session 17. Jul 10 00:23:46.984000 audit[5479]: USER_ACCT pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.986466 sshd[5479]: Accepted publickey for core from 10.0.0.1 port 33170 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:46.985000 audit[5479]: CRED_ACQ pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.985000 audit[5479]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff085bf60 a2=3 a3=1 items=0 ppid=1 pid=5479 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:46.985000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:46.987725 sshd[5479]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:46.992132 systemd-logind[1210]: New session 18 of user core. Jul 10 00:23:46.992661 systemd[1]: Started session-18.scope. Jul 10 00:23:46.995000 audit[5479]: USER_START pid=5479 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:46.996000 audit[5482]: CRED_ACQ pid=5482 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:47.834000 audit[5495]: NETFILTER_CFG table=filter:129 family=2 entries=22 op=nft_register_rule pid=5495 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:47.834000 audit[5495]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=fffff41adc20 a2=0 a3=1 items=0 ppid=2105 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:47.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:47.839642 sshd[5479]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:47.839000 audit[5479]: USER_END pid=5479 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:47.839000 audit[5479]: CRED_DISP pid=5479 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:47.843245 systemd[1]: sshd@17-10.0.0.18:22-10.0.0.1:33170.service: Deactivated successfully. Jul 10 00:23:47.842000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.18:22-10.0.0.1:33170 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:47.844044 systemd[1]: session-18.scope: Deactivated successfully. Jul 10 00:23:47.842000 audit[5495]: NETFILTER_CFG table=nat:130 family=2 entries=24 op=nft_register_rule pid=5495 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:47.842000 audit[5495]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=fffff41adc20 a2=0 a3=1 items=0 ppid=2105 pid=5495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:47.842000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:47.845159 systemd-logind[1210]: Session 18 logged out. Waiting for processes to exit. Jul 10 00:23:47.847190 systemd[1]: Started sshd@18-10.0.0.18:22-10.0.0.1:33180.service. Jul 10 00:23:47.845000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.18:22-10.0.0.1:33180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:47.849042 systemd-logind[1210]: Removed session 18. Jul 10 00:23:47.863000 audit[5501]: NETFILTER_CFG table=filter:131 family=2 entries=34 op=nft_register_rule pid=5501 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:47.863000 audit[5501]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffd9adf310 a2=0 a3=1 items=0 ppid=2105 pid=5501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:47.863000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:47.869000 audit[5501]: NETFILTER_CFG table=nat:132 family=2 entries=24 op=nft_register_rule pid=5501 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:47.869000 audit[5501]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffd9adf310 a2=0 a3=1 items=0 ppid=2105 pid=5501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:47.869000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:47.883000 audit[5498]: USER_ACCT pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:47.885483 sshd[5498]: Accepted publickey for core from 10.0.0.1 port 33180 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:47.885000 audit[5498]: CRED_ACQ pid=5498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:47.885000 audit[5498]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc2cb1100 a2=3 a3=1 items=0 ppid=1 pid=5498 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:47.885000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:47.887097 sshd[5498]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:47.891243 systemd-logind[1210]: New session 19 of user core. Jul 10 00:23:47.893155 systemd[1]: Started session-19.scope. Jul 10 00:23:47.895000 audit[5498]: USER_START pid=5498 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:47.897000 audit[5502]: CRED_ACQ pid=5502 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:48.258459 sshd[5498]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:48.263262 systemd[1]: Started sshd@19-10.0.0.18:22-10.0.0.1:33192.service. Jul 10 00:23:48.261000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.18:22-10.0.0.1:33192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:48.262000 audit[5498]: USER_END pid=5498 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:48.264000 audit[5498]: CRED_DISP pid=5498 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:48.266334 systemd[1]: session-19.scope: Deactivated successfully. Jul 10 00:23:48.267100 systemd[1]: sshd@18-10.0.0.18:22-10.0.0.1:33180.service: Deactivated successfully. Jul 10 00:23:48.265000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.18:22-10.0.0.1:33180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:48.269650 systemd-logind[1210]: Session 19 logged out. Waiting for processes to exit. Jul 10 00:23:48.271432 systemd-logind[1210]: Removed session 19. Jul 10 00:23:48.302000 audit[5510]: USER_ACCT pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:48.304086 sshd[5510]: Accepted publickey for core from 10.0.0.1 port 33192 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:48.303000 audit[5510]: CRED_ACQ pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:48.303000 audit[5510]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4fc2810 a2=3 a3=1 items=0 ppid=1 pid=5510 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:48.303000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:48.305420 sshd[5510]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:48.309383 systemd-logind[1210]: New session 20 of user core. Jul 10 00:23:48.310455 systemd[1]: Started session-20.scope. Jul 10 00:23:48.314000 audit[5510]: USER_START pid=5510 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:48.315000 audit[5513]: CRED_ACQ pid=5513 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:48.437927 sshd[5510]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:48.437000 audit[5510]: USER_END pid=5510 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:48.437000 audit[5510]: CRED_DISP pid=5510 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:48.440794 systemd[1]: sshd@19-10.0.0.18:22-10.0.0.1:33192.service: Deactivated successfully. Jul 10 00:23:48.440878 systemd-logind[1210]: Session 20 logged out. Waiting for processes to exit. Jul 10 00:23:48.440000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.18:22-10.0.0.1:33192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:48.441725 systemd[1]: session-20.scope: Deactivated successfully. Jul 10 00:23:48.442414 systemd-logind[1210]: Removed session 20. Jul 10 00:23:52.368910 kubelet[1954]: E0710 00:23:52.368858 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:53.107000 audit[5533]: NETFILTER_CFG table=filter:133 family=2 entries=22 op=nft_register_rule pid=5533 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:53.110791 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 10 00:23:53.110866 kernel: audit: type=1325 audit(1752107033.107:1580): table=filter:133 family=2 entries=22 op=nft_register_rule pid=5533 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:53.110889 kernel: audit: type=1300 audit(1752107033.107:1580): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffc56da40 a2=0 a3=1 items=0 ppid=2105 pid=5533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:53.107000 audit[5533]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffffc56da40 a2=0 a3=1 items=0 ppid=2105 pid=5533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:53.107000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:53.115305 kernel: audit: type=1327 audit(1752107033.107:1580): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:53.115000 audit[5533]: NETFILTER_CFG table=nat:134 family=2 entries=108 op=nft_register_chain pid=5533 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:53.115000 audit[5533]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50220 a0=3 a1=fffffc56da40 a2=0 a3=1 items=0 ppid=2105 pid=5533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:53.122288 kernel: audit: type=1325 audit(1752107033.115:1581): table=nat:134 family=2 entries=108 op=nft_register_chain pid=5533 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:53.122351 kernel: audit: type=1300 audit(1752107033.115:1581): arch=c00000b7 syscall=211 success=yes exit=50220 a0=3 a1=fffffc56da40 a2=0 a3=1 items=0 ppid=2105 pid=5533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:53.122389 kernel: audit: type=1327 audit(1752107033.115:1581): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:53.115000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:53.441300 systemd[1]: Started sshd@20-10.0.0.18:22-10.0.0.1:55084.service. Jul 10 00:23:53.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.18:22-10.0.0.1:55084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:53.444544 kernel: audit: type=1130 audit(1752107033.439:1582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.18:22-10.0.0.1:55084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:53.472000 audit[5535]: USER_ACCT pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:53.473745 sshd[5535]: Accepted publickey for core from 10.0.0.1 port 55084 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:53.475222 sshd[5535]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:53.473000 audit[5535]: CRED_ACQ pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:53.478245 kernel: audit: type=1101 audit(1752107033.472:1583): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:53.478300 kernel: audit: type=1103 audit(1752107033.473:1584): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:53.478338 kernel: audit: type=1006 audit(1752107033.473:1585): pid=5535 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 10 00:23:53.478587 systemd-logind[1210]: New session 21 of user core. Jul 10 00:23:53.479352 systemd[1]: Started session-21.scope. Jul 10 00:23:53.473000 audit[5535]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffffcf610b0 a2=3 a3=1 items=0 ppid=1 pid=5535 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:53.473000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:53.481000 audit[5535]: USER_START pid=5535 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:53.482000 audit[5537]: CRED_ACQ pid=5537 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:53.593498 sshd[5535]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:53.592000 audit[5535]: USER_END pid=5535 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:53.593000 audit[5535]: CRED_DISP pid=5535 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:53.596085 systemd[1]: sshd@20-10.0.0.18:22-10.0.0.1:55084.service: Deactivated successfully. Jul 10 00:23:53.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.18:22-10.0.0.1:55084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:53.596878 systemd[1]: session-21.scope: Deactivated successfully. Jul 10 00:23:53.597375 systemd-logind[1210]: Session 21 logged out. Waiting for processes to exit. Jul 10 00:23:53.598019 systemd-logind[1210]: Removed session 21. Jul 10 00:23:55.699000 audit[5571]: NETFILTER_CFG table=filter:135 family=2 entries=9 op=nft_register_rule pid=5571 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:55.699000 audit[5571]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffee5532e0 a2=0 a3=1 items=0 ppid=2105 pid=5571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:55.699000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:55.707000 audit[5571]: NETFILTER_CFG table=nat:136 family=2 entries=55 op=nft_register_chain pid=5571 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 10 00:23:55.707000 audit[5571]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20100 a0=3 a1=ffffee5532e0 a2=0 a3=1 items=0 ppid=2105 pid=5571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:55.707000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 10 00:23:57.369093 kubelet[1954]: E0710 00:23:57.369049 1954 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 10 00:23:58.598673 systemd[1]: Started sshd@21-10.0.0.18:22-10.0.0.1:55090.service. Jul 10 00:23:58.602251 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 10 00:23:58.602377 kernel: audit: type=1130 audit(1752107038.597:1593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.18:22-10.0.0.1:55090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:58.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.18:22-10.0.0.1:55090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:23:58.642000 audit[5573]: USER_ACCT pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.643000 audit[5573]: CRED_ACQ pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.645791 sshd[5573]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:23:58.647997 sshd[5573]: Accepted publickey for core from 10.0.0.1 port 55090 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:23:58.650245 kernel: audit: type=1101 audit(1752107038.642:1594): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.650320 kernel: audit: type=1103 audit(1752107038.643:1595): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.650343 kernel: audit: type=1006 audit(1752107038.643:1596): pid=5573 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 10 00:23:58.643000 audit[5573]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd67e8ca0 a2=3 a3=1 items=0 ppid=1 pid=5573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:58.655489 kernel: audit: type=1300 audit(1752107038.643:1596): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd67e8ca0 a2=3 a3=1 items=0 ppid=1 pid=5573 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:23:58.655565 kernel: audit: type=1327 audit(1752107038.643:1596): proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:58.643000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:23:58.658396 systemd[1]: Started session-22.scope. Jul 10 00:23:58.658584 systemd-logind[1210]: New session 22 of user core. Jul 10 00:23:58.663000 audit[5573]: USER_START pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.666000 audit[5575]: CRED_ACQ pid=5575 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.670830 kernel: audit: type=1105 audit(1752107038.663:1597): pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.670952 kernel: audit: type=1103 audit(1752107038.666:1598): pid=5575 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.941015 sshd[5573]: pam_unix(sshd:session): session closed for user core Jul 10 00:23:58.942000 audit[5573]: USER_END pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.945166 systemd[1]: sshd@21-10.0.0.18:22-10.0.0.1:55090.service: Deactivated successfully. Jul 10 00:23:58.945971 systemd[1]: session-22.scope: Deactivated successfully. Jul 10 00:23:58.942000 audit[5573]: CRED_DISP pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.947318 systemd-logind[1210]: Session 22 logged out. Waiting for processes to exit. Jul 10 00:23:58.948154 systemd-logind[1210]: Removed session 22. Jul 10 00:23:58.949310 kernel: audit: type=1106 audit(1752107038.942:1599): pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.949383 kernel: audit: type=1104 audit(1752107038.942:1600): pid=5573 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:23:58.943000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.18:22-10.0.0.1:55090 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:24:02.135011 systemd[1]: run-containerd-runc-k8s.io-78ed2fb8d89f9bd33b37e0dfea1cd5a90e327979e1375b9bb075855dbd184b77-runc.93lzBk.mount: Deactivated successfully. Jul 10 00:24:03.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.18:22-10.0.0.1:36856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:24:03.945681 systemd[1]: Started sshd@22-10.0.0.18:22-10.0.0.1:36856.service. Jul 10 00:24:03.948536 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 10 00:24:03.948625 kernel: audit: type=1130 audit(1752107043.944:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.18:22-10.0.0.1:36856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 10 00:24:03.979000 audit[5608]: USER_ACCT pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:03.981410 sshd[5608]: Accepted publickey for core from 10.0.0.1 port 36856 ssh2: RSA SHA256:qOVwIcEhxIMbnnVzVACNg4ZPFMKwsyA0M9qFZXlj7es Jul 10 00:24:03.984551 kernel: audit: type=1101 audit(1752107043.979:1603): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:03.984000 audit[5608]: CRED_ACQ pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:03.986160 sshd[5608]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 10 00:24:03.989363 kernel: audit: type=1103 audit(1752107043.984:1604): pid=5608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:03.989433 kernel: audit: type=1006 audit(1752107043.984:1605): pid=5608 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 10 00:24:03.989465 kernel: audit: type=1300 audit(1752107043.984:1605): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5f7e440 a2=3 a3=1 items=0 ppid=1 pid=5608 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:24:03.984000 audit[5608]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5f7e440 a2=3 a3=1 items=0 ppid=1 pid=5608 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 10 00:24:03.992562 kernel: audit: type=1327 audit(1752107043.984:1605): proctitle=737368643A20636F7265205B707269765D Jul 10 00:24:03.984000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 10 00:24:03.991571 systemd-logind[1210]: New session 23 of user core. Jul 10 00:24:03.992437 systemd[1]: Started session-23.scope. Jul 10 00:24:03.996000 audit[5608]: USER_START pid=5608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:03.998000 audit[5610]: CRED_ACQ pid=5610 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:04.003164 kernel: audit: type=1105 audit(1752107043.996:1606): pid=5608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:04.003232 kernel: audit: type=1103 audit(1752107043.998:1607): pid=5610 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:04.200481 sshd[5608]: pam_unix(sshd:session): session closed for user core Jul 10 00:24:04.199000 audit[5608]: USER_END pid=5608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:04.199000 audit[5608]: CRED_DISP pid=5608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:04.203387 systemd-logind[1210]: Session 23 logged out. Waiting for processes to exit. Jul 10 00:24:04.203591 systemd[1]: sshd@22-10.0.0.18:22-10.0.0.1:36856.service: Deactivated successfully. Jul 10 00:24:04.204342 systemd[1]: session-23.scope: Deactivated successfully. Jul 10 00:24:04.205429 systemd-logind[1210]: Removed session 23. Jul 10 00:24:04.206509 kernel: audit: type=1106 audit(1752107044.199:1608): pid=5608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:04.206808 kernel: audit: type=1104 audit(1752107044.199:1609): pid=5608 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 10 00:24:04.202000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.18:22-10.0.0.1:36856 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'